cutor.0) score 1007 or sacrifice child [ 854.557627] Killed process 31247 (syz-executor.0) total-vm:75104kB, anon-rss:18036kB, file-rss:34816kB, shmem-rss:0kB [ 854.624894] oom_reaper: reaped process 31247 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 854.651394] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 854.675571] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 854.681039] CPU: 0 PID: 31248 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 854.689335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.699081] Call Trace: [ 854.701845] dump_stack+0x13e/0x194 [ 854.706158] dump_header+0x178/0x6d4 [ 854.709871] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 854.715334] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 854.720866] ? ___ratelimit+0x50/0x519 [ 854.724764] oom_kill_process.cold+0x10/0xae3 [ 854.729249] ? lock_downgrade+0x6e0/0x6e0 [ 854.733603] out_of_memory+0x2d5/0x1110 [ 854.737573] ? oom_killer_disable+0x1c0/0x1c0 [ 854.742487] ? mutex_trylock+0x152/0x1a0 [ 854.746552] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 854.751400] ? warn_alloc+0xf0/0xf0 [ 854.755012] ? find_held_lock+0x2d/0x110 [ 854.760260] ? fs_reclaim_acquire+0x10/0x10 [ 854.764584] __alloc_pages_nodemask+0x5d3/0x700 [ 854.769254] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 854.774264] ? copy_process.part.0+0x17d5/0x6a50 [ 854.779006] ? rcu_read_lock_sched_held+0x10a/0x130 [ 854.784097] ? __lock_acquire+0x5f7/0x4620 [ 854.789186] copy_process.part.0+0x26a/0x6a50 [ 854.793674] ? check_preemption_disabled+0x35/0x240 [ 854.798998] ? perf_trace_lock+0x109/0x4b0 [ 854.803376] ? save_trace+0x290/0x290 [ 854.807163] ? SOFTIRQ_verbose+0x10/0x10 [ 854.811232] ? find_held_lock+0x2d/0x110 [ 854.815471] ? __cleanup_sighand+0x40/0x40 [ 854.819694] ? lock_downgrade+0x6e0/0x6e0 [ 854.823835] _do_fork+0x180/0xc80 [ 854.827275] ? put_timespec64+0xaa/0xf0 [ 854.831232] ? fork_idle+0x270/0x270 [ 854.834932] ? SyS_clock_gettime+0xf5/0x180 [ 854.839239] ? SyS_clock_settime+0x1a0/0x1a0 [ 854.843687] ? fput+0xb/0x140 [ 854.846837] ? do_syscall_64+0x4c/0x640 [ 854.850797] ? sys_vfork+0x20/0x20 [ 854.854873] do_syscall_64+0x1d5/0x640 [ 854.858773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 854.863957] RIP: 0033:0x45ca29 [ 854.867127] RSP: 002b:00007f4105d51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 854.874845] RAX: ffffffffffffffda RBX: 00000000004dabc0 RCX: 000000000045ca29 [ 854.882125] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 854.890079] RBP: 000000000078bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 854.897443] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 854.905154] R13: 0000000000000076 R14: 00000000004c331e R15: 00007f4105d526d4 [ 854.916543] Mem-Info: [ 854.919183] active_anon:262809 inactive_anon:1063958 isolated_anon:0 [ 854.919183] active_file:13 inactive_file:22 isolated_file:0 [ 854.919183] unevictable:31224 dirty:0 writeback:0 unstable:0 [ 854.919183] slab_reclaimable:19600 slab_unreclaimable:108040 [ 854.919183] mapped:58489 shmem:4218 pagetables:14272 bounce:0 [ 854.919183] free:24881 free_pcp:76 free_cma:0 [ 854.994446] Node 0 active_anon:1040632kB inactive_anon:637712kB active_file:152kB inactive_file:0kB unevictable:111856kB isolated(anon):0kB isolated(file):0kB mapped:233780kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 855.032148] Node 1 active_anon:10604kB inactive_anon:3618120kB active_file:0kB inactive_file:4kB unevictable:13040kB isolated(anon):0kB isolated(file):0kB mapped:176kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 855.060726] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:24kB writepending:0kB present:15992kB managed:15908kB mlocked:24kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.088231] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 855.093340] Node 0 DMA32 free:35848kB min:36272kB low:45340kB high:54408kB active_anon:1040620kB inactive_anon:632640kB active_file:112kB inactive_file:4kB unevictable:111832kB writepending:0kB present:3129332kB managed:2621260kB mlocked:111832kB kernel_stack:13120kB pagetables:25116kB bounce:0kB free_pcp:316kB local_pcp:0kB free_cma:0kB [ 855.124312] lowmem_reserve[]: 0 0 0 0 0 [ 855.128355] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.161491] lowmem_reserve[]: 0 0 0 0 0 [ 855.165510] Node 1 Normal free:53236kB min:53612kB low:67012kB high:80412kB active_anon:10604kB inactive_anon:3618120kB active_file:0kB inactive_file:8kB unevictable:13040kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13040kB kernel_stack:8800kB pagetables:31924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.217860] lowmem_reserve[]: 0 0 0 0 0 [ 855.230764] Node 0 DMA: 4*4kB (UME) 5*8kB (UME) 4*16kB (UE) 4*32kB (U) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 855.257297] Node 0 DMA32: 934*4kB (UM) 945*8kB (UME) 84*16kB (UME) 201*32kB (UME) 134*64kB (UME) 54*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35840kB [ 855.285727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 855.301909] Node 1 Normal: 185*4kB (UME) 80*8kB (UME) 143*16kB (UE) 47*32kB (UE) 249*64kB (UME) 119*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53236kB [ 855.328446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 855.338991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 855.357085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 855.366174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 855.384336] 9116 total pagecache pages [ 855.388233] 0 pages in swap cache [ 855.395044] Swap cache stats: add 0, delete 0, find 0/0 [ 855.405201] Free swap = 0kB [ 855.408230] Total swap = 0kB [ 855.415395] 1965979 pages RAM [ 855.418509] 0 pages HighMem/MovableOnly [ 855.422705] 339053 pages reserved [ 855.426223] 0 pages cma reserved [ 855.433255] Out of memory: Kill process 31227 (syz-executor.1) score 1007 or sacrifice child [ 855.443325] Killed process 31230 (syz-executor.1) total-vm:74972kB, anon-rss:18028kB, file-rss:40176kB, shmem-rss:0kB [ 855.486856] oom_reaper: reaped process 31230 (syz-executor.1), now anon-rss:18020kB, file-rss:5364kB, shmem-rss:0kB 07:50:25 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x8}, 0x4}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:50:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:50:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:25 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:25 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x6) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0xfffffefc) [ 856.857101] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 856.872034] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 856.877380] CPU: 1 PID: 31260 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 856.885696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.895052] Call Trace: [ 856.897941] dump_stack+0x13e/0x194 [ 856.901920] dump_header+0x178/0x6d4 [ 856.906195] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 856.911218] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 856.916332] ? ___ratelimit+0x50/0x519 [ 856.921106] oom_kill_process.cold+0x10/0xae3 [ 856.925958] ? lock_acquire+0x170/0x3f0 [ 856.929936] ? lock_downgrade+0x6e0/0x6e0 [ 856.934103] out_of_memory+0x2d5/0x1110 [ 856.938090] ? oom_killer_disable+0x1c0/0x1c0 [ 856.942587] ? mutex_trylock+0x152/0x1a0 [ 856.946648] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 856.951518] ? warn_alloc+0xf0/0xf0 [ 856.955175] __alloc_pages_nodemask+0x5d3/0x700 [ 856.959851] ? __pte_alloc+0x19c/0x2c0 [ 856.963739] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 856.968797] alloc_pages_vma+0xc2/0x4a0 [ 856.973037] __handle_mm_fault+0x17b6/0x3280 [ 856.977542] ? copy_page_range+0x1d70/0x1d70 [ 856.981974] ? find_held_lock+0x2d/0x110 [ 856.986050] handle_mm_fault+0x288/0x7a0 [ 856.992199] __get_user_pages+0x44d/0x11e0 [ 856.996474] ? follow_page_mask+0x1580/0x1580 [ 857.000973] ? perf_trace_lock+0x109/0x4b0 [ 857.005211] ? lock_acquire+0x170/0x3f0 [ 857.009190] ? __mm_populate+0x1e3/0x2c0 [ 857.013255] populate_vma_page_range+0x17b/0x210 [ 857.018025] __mm_populate+0x195/0x2c0 [ 857.021939] ? populate_vma_page_range+0x210/0x210 [ 857.026871] ? security_capable+0x88/0xb0 [ 857.031164] SyS_mlockall+0x3f5/0x520 [ 857.034970] ? SyS_munlock+0xf0/0xf0 [ 857.038882] do_syscall_64+0x1d5/0x640 [ 857.042871] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 857.048067] RIP: 0033:0x45ca29 [ 857.051255] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 857.058970] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 857.066246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 857.073524] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.080802] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 857.088083] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 [ 857.138164] Mem-Info: [ 857.176457] active_anon:262883 inactive_anon:1063958 isolated_anon:0 [ 857.176457] active_file:56 inactive_file:0 isolated_file:0 [ 857.176457] unevictable:30044 dirty:0 writeback:0 unstable:0 [ 857.176457] slab_reclaimable:19481 slab_unreclaimable:109157 [ 857.176457] mapped:58060 shmem:4218 pagetables:14316 bounce:0 [ 857.176457] free:24932 free_pcp:56 free_cma:0 [ 857.491647] Node 0 active_anon:1040936kB inactive_anon:637708kB active_file:12kB inactive_file:68kB unevictable:107804kB isolated(anon):0kB isolated(file):0kB mapped:232124kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 857.715217] Node 1 active_anon:10596kB inactive_anon:3618124kB active_file:20kB inactive_file:0kB unevictable:12672kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 857.905158] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:36kB writepending:0kB present:15992kB managed:15908kB mlocked:36kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.002951] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 858.008042] Node 0 DMA32 free:36192kB min:36272kB low:45340kB high:54408kB active_anon:1040924kB inactive_anon:632636kB active_file:56kB inactive_file:80kB unevictable:108996kB writepending:0kB present:3129332kB managed:2621260kB mlocked:108996kB kernel_stack:13216kB pagetables:25296kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 858.054732] lowmem_reserve[]: 0 0 0 0 0 [ 858.058790] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.104689] lowmem_reserve[]: 0 0 0 0 0 [ 858.108732] Node 1 Normal free:53352kB min:53612kB low:67012kB high:80412kB active_anon:10596kB inactive_anon:3618124kB active_file:0kB inactive_file:4kB unevictable:12672kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12672kB kernel_stack:8768kB pagetables:31924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.237180] lowmem_reserve[]: 0 0 0 0 0 [ 858.245866] Node 0 DMA: 4*4kB (UE) 6*8kB (UE) 5*16kB (UE) 4*32kB (U) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 858.295584] Node 0 DMA32: 1019*4kB (UME) 618*8kB (UME) 112*16kB (UME) 255*32kB (UME) 139*64kB (UME) 54*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36060kB [ 858.324675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 858.338986] Node 1 Normal: 186*4kB (UME) 44*8kB (UME) 138*16kB (UME) 52*32kB (UME) 248*64kB (UME) 122*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53352kB [ 858.371805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 858.380864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 858.396033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 858.404973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 858.419937] 8670 total pagecache pages [ 858.423854] 0 pages in swap cache [ 858.427305] Swap cache stats: add 0, delete 0, find 0/0 [ 858.435835] Free swap = 0kB [ 858.438866] Total swap = 0kB [ 858.445611] 1965979 pages RAM [ 858.449019] 0 pages HighMem/MovableOnly [ 858.458309] 339053 pages reserved [ 858.466189] 0 pages cma reserved [ 858.473091] Out of memory: Kill process 31249 (syz-executor.1) score 1007 or sacrifice child [ 858.485546] Killed process 31268 (syz-executor.1) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 858.532820] oom_reaper: reaped process 31268 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 858.556146] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 858.581084] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 858.586499] CPU: 0 PID: 31260 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 858.594731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.604202] Call Trace: [ 858.606844] dump_stack+0x13e/0x194 [ 858.610467] dump_header+0x178/0x6d4 [ 858.614169] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 858.619175] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 858.624601] ? ___ratelimit+0x50/0x519 [ 858.628492] oom_kill_process.cold+0x10/0xae3 [ 858.633022] ? lock_downgrade+0x6e0/0x6e0 [ 858.637167] out_of_memory+0x2d5/0x1110 [ 858.641138] ? oom_killer_disable+0x1c0/0x1c0 [ 858.645623] ? mutex_trylock+0x152/0x1a0 [ 858.649672] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 858.654510] ? warn_alloc+0xf0/0xf0 [ 858.658139] __alloc_pages_nodemask+0x5d3/0x700 [ 858.662860] ? __pte_alloc+0x19c/0x2c0 [ 858.666743] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 858.671820] alloc_pages_vma+0xc2/0x4a0 [ 858.675797] __handle_mm_fault+0x17b6/0x3280 [ 858.680210] ? copy_page_range+0x1d70/0x1d70 [ 858.684628] ? find_held_lock+0x2d/0x110 [ 858.688950] handle_mm_fault+0x288/0x7a0 [ 858.693034] __get_user_pages+0x44d/0x11e0 [ 858.697272] ? follow_page_mask+0x1580/0x1580 [ 858.701967] ? perf_trace_lock+0x109/0x4b0 [ 858.706738] ? lock_acquire+0x170/0x3f0 [ 858.710701] ? __mm_populate+0x1e3/0x2c0 [ 858.714789] populate_vma_page_range+0x17b/0x210 [ 858.719563] __mm_populate+0x195/0x2c0 [ 858.723497] ? populate_vma_page_range+0x210/0x210 [ 858.728693] ? security_capable+0x88/0xb0 [ 858.732949] SyS_mlockall+0x3f5/0x520 [ 858.736757] ? SyS_munlock+0xf0/0xf0 [ 858.740984] do_syscall_64+0x1d5/0x640 [ 858.745401] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 858.750844] RIP: 0033:0x45ca29 [ 858.754041] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 858.761743] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 858.769088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 858.776705] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 858.784149] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 858.792217] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 [ 858.806301] Mem-Info: [ 858.808755] active_anon:262883 inactive_anon:1063958 isolated_anon:0 [ 858.808755] active_file:29 inactive_file:6 isolated_file:0 [ 858.808755] unevictable:30488 dirty:0 writeback:0 unstable:0 [ 858.808755] slab_reclaimable:19483 slab_unreclaimable:108700 [ 858.808755] mapped:58060 shmem:4218 pagetables:14316 bounce:0 [ 858.808755] free:24942 free_pcp:76 free_cma:0 [ 858.848733] Node 0 active_anon:1040936kB inactive_anon:637708kB active_file:120kB inactive_file:16kB unevictable:109280kB isolated(anon):0kB isolated(file):0kB mapped:232124kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 858.882193] Node 1 active_anon:10596kB inactive_anon:3618124kB active_file:12kB inactive_file:0kB unevictable:12672kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 858.910604] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:36kB writepending:0kB present:15992kB managed:15908kB mlocked:36kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.938583] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 858.946958] Node 0 DMA32 free:35968kB min:36272kB low:45340kB high:54408kB active_anon:1040924kB inactive_anon:632636kB active_file:72kB inactive_file:64kB unevictable:109244kB writepending:0kB present:3129332kB managed:2621260kB mlocked:109244kB kernel_stack:13120kB pagetables:25296kB bounce:0kB free_pcp:304kB local_pcp:0kB free_cma:0kB [ 858.990894] lowmem_reserve[]: 0 0 0 0 0 [ 858.994930] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.027026] lowmem_reserve[]: 0 0 0 0 0 [ 859.082664] Node 1 Normal free:53352kB min:53612kB low:67012kB high:80412kB active_anon:10596kB inactive_anon:3618124kB active_file:4kB inactive_file:0kB unevictable:12672kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12672kB kernel_stack:8768kB pagetables:31924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.256904] lowmem_reserve[]: 0 0 0 0 0 [ 859.265807] Node 0 DMA: 4*4kB (UE) 6*8kB (UE) 5*16kB (UE) 4*32kB (U) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 859.311115] Node 0 DMA32: 3318*4kB (UME) 1311*8kB (UME) 282*16kB (UME) 266*32kB (UME) 139*64kB (UME) 54*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53872kB 07:50:28 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 859.402150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 07:50:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x8}, 0x4}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:50:28 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x6) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0xfffffefc) [ 859.440036] Node 1 Normal: 290*4kB (UME) 231*8kB (UME) 213*16kB (UME) 102*32kB (UME) 248*64kB (UME) 122*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 58064kB 07:50:28 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 859.550734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.637219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 859.702010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.759975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 859.813250] 11608 total pagecache pages [ 859.840550] 0 pages in swap cache [ 859.864954] Swap cache stats: add 0, delete 0, find 0/0 [ 859.900143] Free swap = 0kB [ 859.921393] Total swap = 0kB [ 859.942253] 1965979 pages RAM [ 859.961830] 0 pages HighMem/MovableOnly [ 859.985814] 339053 pages reserved [ 860.006115] 0 pages cma reserved [ 860.025710] Out of memory: Kill process 31249 (syz-executor.1) score 1007 or sacrifice child [ 861.072472] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 861.183240] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 861.236511] CPU: 1 PID: 6333 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 861.243993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.253354] Call Trace: [ 861.255952] dump_stack+0x13e/0x194 [ 861.259590] dump_header+0x178/0x6d4 [ 861.263302] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 861.268318] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 861.273421] ? ___ratelimit+0x50/0x519 [ 861.277319] oom_kill_process.cold+0x10/0xae3 [ 861.281908] ? lock_acquire+0x170/0x3f0 [ 861.285877] ? lock_downgrade+0x6e0/0x6e0 [ 861.290034] out_of_memory+0x2d5/0x1110 [ 861.294108] ? oom_killer_disable+0x1c0/0x1c0 [ 861.298608] ? mutex_trylock+0x152/0x1a0 [ 861.302719] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 861.307580] ? warn_alloc+0xf0/0xf0 [ 861.311221] __alloc_pages_nodemask+0x5d3/0x700 [ 861.315980] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 861.320996] ? lock_downgrade+0x6e0/0x6e0 [ 861.325156] alloc_pages_current+0xe7/0x1e0 [ 861.329488] __page_cache_alloc+0x245/0x3d0 [ 861.333811] filemap_fault+0xc18/0x1c50 [ 861.337796] ? __lock_page_or_retry+0x8a0/0x8a0 [ 861.342482] ? lock_acquire+0x170/0x3f0 [ 861.346462] ? ext4_filemap_fault+0x7c/0xb0 [ 861.350801] ext4_filemap_fault+0x84/0xb0 [ 861.354959] __do_fault+0xfa/0x380 [ 861.358525] __handle_mm_fault+0x22e9/0x3280 [ 861.362941] ? copy_page_range+0x1d70/0x1d70 [ 861.367358] ? find_held_lock+0x2d/0x110 [ 861.371427] handle_mm_fault+0x288/0x7a0 [ 861.375500] __do_page_fault+0x4bc/0xb40 [ 861.379597] ? vmalloc_fault+0xdf0/0xdf0 [ 861.383668] ? do_page_fault+0x60/0x4f2 [ 861.387723] ? page_fault+0x2f/0x50 [ 861.391344] page_fault+0x45/0x50 [ 861.394907] RIP: 00f1:0x11 [ 861.397758] RSP: 0000:000000c42004ff18 EFLAGS: 0042f0a0 [ 862.007501] Mem-Info: [ 862.015552] active_anon:262710 inactive_anon:1066048 isolated_anon:0 [ 862.015552] active_file:26 inactive_file:0 isolated_file:10 [ 862.015552] unevictable:28367 dirty:0 writeback:0 unstable:0 [ 862.015552] slab_reclaimable:19390 slab_unreclaimable:108953 [ 862.015552] mapped:58724 shmem:4218 pagetables:14265 bounce:0 [ 862.015552] free:24854 free_pcp:201 free_cma:0 [ 862.052273] Node 0 active_anon:1040260kB inactive_anon:643596kB active_file:20kB inactive_file:44kB unevictable:103136kB isolated(anon):0kB isolated(file):0kB mapped:231984kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 862.088306] Node 1 active_anon:10580kB inactive_anon:3620596kB active_file:40kB inactive_file:36kB unevictable:10332kB isolated(anon):0kB isolated(file):0kB mapped:2868kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 862.157415] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.246359] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 862.264817] Node 0 DMA32 free:36020kB min:36272kB low:45340kB high:54408kB active_anon:1040248kB inactive_anon:638524kB active_file:16kB inactive_file:48kB unevictable:103076kB writepending:0kB present:3129332kB managed:2621260kB mlocked:103076kB kernel_stack:13120kB pagetables:25020kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 862.308120] lowmem_reserve[]: 0 0 0 0 0 [ 862.315540] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.376627] lowmem_reserve[]: 0 0 0 0 0 [ 862.385081] Node 1 Normal free:53304kB min:53612kB low:67012kB high:80412kB active_anon:10580kB inactive_anon:3620596kB active_file:124kB inactive_file:24kB unevictable:10332kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10332kB kernel_stack:8832kB pagetables:31996kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.468993] lowmem_reserve[]: 0 0 0 0 0 [ 862.473122] Node 0 DMA: 4*4kB (UE) 7*8kB (UME) 5*16kB (UE) 5*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 862.592894] Node 0 DMA32: 1179*4kB (UME) 352*8kB (UME) 136*16kB (UME) 282*32kB (UME) 149*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36972kB [ 862.690457] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 862.798947] Node 1 Normal: 217*4kB (UME) 53*8kB (ME) 151*16kB (UME) 65*32kB (UME) 244*64kB (UME) 122*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53916kB [ 862.847380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:50:32 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 862.968398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:50:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:50:32 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0xfffffefc) [ 863.049163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:50:32 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r1}) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = shmget(0x3, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setreuid(0x0, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r6 = getgid() write$FUSE_DIRENTPLUS(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0x17) r7 = getpid() perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x6, 0x0, 0x3, 0x64, 0x0, 0x80000001, 0x82800, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffdc, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x3080, 0x0, 0x0, 0x0, 0x1, 0x3}, r7, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xffffffffffffffff, r4, r6, 0x20, 0xfffa}, 0x80000000, 0x5, 0x9, 0x8, 0x0, r7, 0x40}) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, 0x0, r8}, &(0x7f00000009c0)=""/240, 0xf0, 0x0) [ 863.106873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 863.143949] 11252 total pagecache pages [ 863.169242] 0 pages in swap cache [ 863.192918] Swap cache stats: add 0, delete 0, find 0/0 [ 863.261688] Free swap = 0kB 07:50:32 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:32 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 863.291408] Total swap = 0kB [ 863.307245] 1965979 pages RAM [ 863.330881] 0 pages HighMem/MovableOnly [ 863.356531] 339053 pages reserved [ 863.385737] 0 pages cma reserved [ 863.414119] Out of memory: Kill process 31280 (syz-executor.0) score 1008 or sacrifice child [ 863.918005] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 863.931429] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 863.936999] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 863.944985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.954476] Call Trace: [ 863.957063] dump_stack+0x13e/0x194 [ 863.960703] dump_header+0x178/0x6d4 [ 863.964440] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 863.969448] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 863.974538] ? ___ratelimit+0x50/0x519 [ 863.978415] oom_kill_process.cold+0x10/0xae3 [ 863.982899] ? lock_acquire+0x170/0x3f0 [ 863.986865] ? lock_downgrade+0x6e0/0x6e0 [ 863.991004] out_of_memory+0x2d5/0x1110 [ 863.995525] ? oom_killer_disable+0x1c0/0x1c0 [ 864.000007] ? mutex_trylock+0x152/0x1a0 [ 864.004272] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 864.009145] ? warn_alloc+0xf0/0xf0 [ 864.012791] __alloc_pages_nodemask+0x5d3/0x700 [ 864.017469] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 864.022486] ? find_held_lock+0x2d/0x110 [ 864.026662] alloc_pages_vma+0xc2/0x4a0 [ 864.030629] __handle_mm_fault+0x17b6/0x3280 [ 864.035028] ? copy_page_range+0x1d70/0x1d70 [ 864.039430] ? find_held_lock+0x2d/0x110 [ 864.043499] handle_mm_fault+0x288/0x7a0 [ 864.047554] __get_user_pages+0x44d/0x11e0 [ 864.051919] ? follow_page_mask+0x1580/0x1580 [ 864.056442] ? perf_trace_lock+0x109/0x4b0 [ 864.060692] ? lock_acquire+0x170/0x3f0 [ 864.064674] ? __mm_populate+0x1e3/0x2c0 [ 864.068836] populate_vma_page_range+0x17b/0x210 [ 864.073590] __mm_populate+0x195/0x2c0 [ 864.077466] ? populate_vma_page_range+0x210/0x210 [ 864.082392] ? security_capable+0x88/0xb0 [ 864.086668] SyS_mlockall+0x3f5/0x520 [ 864.090461] ? SyS_munlock+0xf0/0xf0 [ 864.094239] do_syscall_64+0x1d5/0x640 [ 864.098135] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 864.103333] RIP: 0033:0x45ca29 [ 864.107044] RSP: 002b:00007f4105d72c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 864.114756] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 864.122150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 864.129497] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 864.137035] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 864.144291] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f4105d736d4 [ 864.158211] Mem-Info: [ 864.160728] active_anon:262856 inactive_anon:1063958 isolated_anon:0 [ 864.160728] active_file:25 inactive_file:1 isolated_file:0 [ 864.160728] unevictable:30810 dirty:0 writeback:0 unstable:0 [ 864.160728] slab_reclaimable:19441 slab_unreclaimable:108515 [ 864.160728] mapped:59111 shmem:4218 pagetables:14316 bounce:0 [ 864.160728] free:24803 free_pcp:140 free_cma:0 [ 864.228885] Node 0 active_anon:1040676kB inactive_anon:637708kB active_file:52kB inactive_file:84kB unevictable:111468kB isolated(anon):0kB isolated(file):0kB mapped:235184kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 864.305576] Node 1 active_anon:10748kB inactive_anon:3618124kB active_file:4kB inactive_file:0kB unevictable:11772kB isolated(anon):0kB isolated(file):0kB mapped:1260kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 864.338020] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.372571] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 864.377638] Node 0 DMA32 free:35248kB min:36272kB low:45340kB high:54408kB active_anon:1040664kB inactive_anon:632636kB active_file:152kB inactive_file:0kB unevictable:111408kB writepending:0kB present:3129332kB managed:2621260kB mlocked:111408kB kernel_stack:13184kB pagetables:25292kB bounce:0kB free_pcp:328kB local_pcp:88kB free_cma:0kB [ 864.543600] lowmem_reserve[]: 0 0 0 0 0 [ 864.547654] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.573753] lowmem_reserve[]: 0 0 0 0 0 [ 864.577765] Node 1 Normal free:53540kB min:53612kB low:67012kB high:80412kB active_anon:10748kB inactive_anon:3618124kB active_file:4kB inactive_file:0kB unevictable:11772kB writepending:0kB present:3932160kB managed:3870192kB mlocked:11772kB kernel_stack:8768kB pagetables:31928kB bounce:0kB free_pcp:232kB local_pcp:112kB free_cma:0kB [ 864.617407] lowmem_reserve[]: 0 0 0 0 0 [ 864.621502] Node 0 DMA: 4*4kB (UE) 7*8kB (UME) 4*16kB (UE) 6*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 864.698934] Node 0 DMA32: 1018*4kB (UE) 589*8kB (UME) 95*16kB (UME) 210*32kB (UME) 149*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35264kB [ 864.778007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 864.858966] Node 1 Normal: 185*4kB (UME) 50*8kB (UE) 112*16kB (UE) 54*32kB (UE) 251*64kB (UME) 125*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53620kB [ 864.948713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.997581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.057181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.112142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.166247] 9694 total pagecache pages [ 865.186833] 0 pages in swap cache [ 865.209212] Swap cache stats: add 0, delete 0, find 0/0 [ 865.244514] Free swap = 0kB [ 865.259857] Total swap = 0kB [ 865.276213] 1965979 pages RAM [ 865.292700] 0 pages HighMem/MovableOnly [ 865.307824] 339053 pages reserved [ 865.333052] 0 pages cma reserved [ 865.360538] Out of memory: Kill process 31302 (syz-executor.0) score 1007 or sacrifice child [ 865.406248] Killed process 31302 (syz-executor.0) total-vm:74840kB, anon-rss:14824kB, file-rss:39212kB, shmem-rss:0kB [ 865.486955] oom_reaper: reaped process 31302 (syz-executor.0), now anon-rss:15092kB, file-rss:5360kB, shmem-rss:0kB [ 865.551015] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 865.593123] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 865.598434] CPU: 0 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 865.606235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.615682] Call Trace: [ 865.618277] dump_stack+0x13e/0x194 [ 865.621914] dump_header+0x178/0x6d4 [ 865.625732] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 865.630754] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 865.635864] ? ___ratelimit+0x50/0x519 [ 865.639760] oom_kill_process.cold+0x10/0xae3 [ 865.644271] ? lock_downgrade+0x6e0/0x6e0 [ 865.648429] out_of_memory+0x2d5/0x1110 [ 865.652410] ? oom_killer_disable+0x1c0/0x1c0 [ 865.656904] ? mutex_trylock+0x152/0x1a0 [ 865.660970] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 865.665940] ? warn_alloc+0xf0/0xf0 [ 865.669563] __alloc_pages_nodemask+0x5d3/0x700 [ 865.674223] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 865.679483] ? lock_downgrade+0x6e0/0x6e0 [ 865.683621] alloc_pages_current+0xe7/0x1e0 [ 865.687942] __page_cache_alloc+0x245/0x3d0 [ 865.692269] filemap_fault+0xc18/0x1c50 [ 865.696255] ? __lock_page_or_retry+0x8a0/0x8a0 [ 865.700935] ? lock_acquire+0x170/0x3f0 [ 865.704902] ? ext4_filemap_fault+0x7c/0xb0 [ 865.709225] ext4_filemap_fault+0x84/0xb0 [ 865.714249] __do_fault+0xfa/0x380 [ 865.717782] __handle_mm_fault+0x22e9/0x3280 [ 865.722196] ? copy_page_range+0x1d70/0x1d70 [ 865.726590] ? find_held_lock+0x2d/0x110 [ 865.730654] handle_mm_fault+0x288/0x7a0 [ 865.735311] __do_page_fault+0x4bc/0xb40 [ 865.739361] ? vmalloc_fault+0xdf0/0xdf0 [ 865.743429] ? do_page_fault+0x60/0x4f2 [ 865.747480] ? page_fault+0x2f/0x50 [ 865.751094] page_fault+0x45/0x50 [ 865.754525] RIP: 75b22e40:0xd2bf7 [ 865.757953] RSP: d2c22:000000000000090e EFLAGS: 0000000d [ 865.768849] Mem-Info: [ 865.768933] active_anon:262852 inactive_anon:1063958 isolated_anon:0 [ 865.768933] active_file:5 inactive_file:35 isolated_file:0 [ 865.768933] unevictable:27039 dirty:0 writeback:0 unstable:0 [ 865.768933] slab_reclaimable:19441 slab_unreclaimable:108491 [ 865.768933] mapped:58082 shmem:4218 pagetables:14283 bounce:0 [ 865.768933] free:28467 free_pcp:331 free_cma:0 [ 865.768947] Node 0 active_anon:1040660kB inactive_anon:637708kB active_file:84kB inactive_file:72kB unevictable:98864kB isolated(anon):0kB isolated(file):0kB mapped:231068kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 865.768961] Node 1 active_anon:10748kB inactive_anon:3618124kB active_file:0kB inactive_file:68kB unevictable:9292kB isolated(anon):0kB isolated(file):0kB mapped:1260kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 866.234858] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 866.369318] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 866.381105] Node 0 DMA32 free:61208kB min:36272kB low:45340kB high:54408kB active_anon:1040656kB inactive_anon:633644kB active_file:960kB inactive_file:1120kB unevictable:79956kB writepending:0kB present:3129332kB managed:2621260kB mlocked:79856kB kernel_stack:13024kB pagetables:25180kB bounce:0kB free_pcp:1320kB local_pcp:640kB free_cma:0kB [ 866.425559] lowmem_reserve[]: 0 0 0 0 0 [ 866.430174] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 866.458268] lowmem_reserve[]: 0 0 0 0 0 [ 866.465619] Node 1 Normal free:58440kB min:53612kB low:67012kB high:80412kB active_anon:10752kB inactive_anon:3618224kB active_file:68kB inactive_file:1252kB unevictable:4116kB writepending:0kB present:3932160kB managed:3870192kB mlocked:4076kB kernel_stack:8768kB pagetables:31932kB bounce:0kB free_pcp:1284kB local_pcp:648kB free_cma:0kB [ 866.511321] lowmem_reserve[]: 0 0 0 0 0 [ 866.515610] Node 0 DMA: 6*4kB (UME) 10*8kB (UME) 4*16kB (UE) 6*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10472kB [ 866.551330] Node 0 DMA32: 4050*4kB (UME) 2159*8kB (UME) 747*16kB (UME) 287*32kB (UME) 149*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72848kB 07:50:35 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0xfffffefc) 07:50:35 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:35 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:35 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 866.587094] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 07:50:35 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 866.666923] Node 1 Normal: 354*4kB (UME) 305*8kB (ME) 273*16kB (UME) 139*32kB (UME) 256*64kB (UME) 126*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 62080kB [ 866.763526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 866.833256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 866.888863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 866.954224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 867.017933] 11966 total pagecache pages [ 867.048961] 0 pages in swap cache [ 867.069019] Swap cache stats: add 0, delete 0, find 0/0 [ 867.095306] Free swap = 0kB [ 867.110267] Total swap = 0kB [ 867.116864] 1965979 pages RAM [ 867.126471] 0 pages HighMem/MovableOnly [ 867.131169] 339053 pages reserved [ 867.134792] 0 pages cma reserved [ 867.138316] Out of memory: Kill process 31294 (syz-executor.5) score 1007 or sacrifice child [ 867.265138] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 867.287057] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 867.293129] CPU: 0 PID: 31325 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 867.301951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.311310] Call Trace: [ 867.313928] dump_stack+0x13e/0x194 [ 867.317826] dump_header+0x178/0x6d4 [ 867.321541] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 867.327272] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 867.332472] ? ___ratelimit+0x50/0x519 [ 867.336364] oom_kill_process.cold+0x10/0xae3 [ 867.340985] ? lock_downgrade+0x6e0/0x6e0 [ 867.345142] out_of_memory+0x2d5/0x1110 [ 867.349295] ? oom_killer_disable+0x1c0/0x1c0 [ 867.353802] ? mutex_trylock+0x152/0x1a0 [ 867.358306] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 867.363368] ? warn_alloc+0xf0/0xf0 [ 867.367277] __alloc_pages_nodemask+0x5d3/0x700 [ 867.371996] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 867.377041] ? mark_held_locks+0xa6/0xf0 [ 867.381384] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 867.386444] alloc_pages_vma+0xc2/0x4a0 [ 867.391308] __handle_mm_fault+0x17b6/0x3280 [ 867.395907] ? copy_page_range+0x1d70/0x1d70 [ 867.400321] ? find_held_lock+0x2d/0x110 [ 867.404414] handle_mm_fault+0x288/0x7a0 [ 867.408481] __get_user_pages+0x44d/0x11e0 [ 867.412732] ? follow_page_mask+0x1580/0x1580 [ 867.417229] ? perf_trace_lock+0x109/0x4b0 [ 867.421471] ? lock_acquire+0x170/0x3f0 [ 867.425444] ? __mm_populate+0x1e3/0x2c0 [ 867.429513] populate_vma_page_range+0x17b/0x210 [ 867.434279] __mm_populate+0x195/0x2c0 [ 867.438171] ? populate_vma_page_range+0x210/0x210 [ 867.443102] ? security_capable+0x88/0xb0 [ 867.447259] SyS_mlockall+0x3f5/0x520 [ 867.451058] ? SyS_munlock+0xf0/0xf0 [ 867.454874] do_syscall_64+0x1d5/0x640 [ 867.458780] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 867.464078] RIP: 0033:0x45ca29 [ 867.467271] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 867.474991] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 867.482352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 867.489631] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 867.497146] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 867.504415] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 [ 867.511968] Mem-Info: [ 867.514398] active_anon:262680 inactive_anon:1063958 isolated_anon:0 [ 867.514398] active_file:35 inactive_file:3 isolated_file:0 [ 867.514398] unevictable:31363 dirty:0 writeback:10 unstable:0 [ 867.514398] slab_reclaimable:19490 slab_unreclaimable:108150 [ 867.514398] mapped:59138 shmem:4218 pagetables:14225 bounce:0 [ 867.514398] free:24940 free_pcp:34 free_cma:0 [ 867.548560] Node 0 active_anon:1040016kB inactive_anon:637708kB active_file:132kB inactive_file:12kB unevictable:113640kB isolated(anon):0kB isolated(file):0kB mapped:235292kB dirty:0kB writeback:40kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 867.577246] Node 1 active_anon:10704kB inactive_anon:3618124kB active_file:8kB inactive_file:0kB unevictable:11812kB isolated(anon):0kB isolated(file):0kB mapped:1260kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 867.605954] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 867.632971] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 867.638038] Node 0 DMA32 free:36000kB min:36272kB low:45340kB high:54408kB active_anon:1040004kB inactive_anon:632636kB active_file:400kB inactive_file:144kB unevictable:113196kB writepending:36kB present:3129332kB managed:2621260kB mlocked:113196kB kernel_stack:13056kB pagetables:24956kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 867.705325] lowmem_reserve[]: 0 0 0 0 0 [ 867.730569] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 867.884688] lowmem_reserve[]: 0 0 0 0 0 [ 867.914338] Node 1 Normal free:53320kB min:53612kB low:67012kB high:80412kB active_anon:10704kB inactive_anon:3618124kB active_file:8kB inactive_file:0kB unevictable:11812kB writepending:0kB present:3932160kB managed:3870192kB mlocked:11812kB kernel_stack:8768kB pagetables:31900kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.090065] lowmem_reserve[]: 0 0 0 0 0 [ 868.094185] Node 0 DMA: 4*4kB (UE) 7*8kB (UME) 4*16kB (UE) 6*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 868.110216] Node 0 DMA32: 1139*4kB (UME) 755*8kB (UME) 157*16kB (UME) 211*32kB (UE) 120*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36244kB [ 868.126997] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 868.137854] Node 1 Normal: 199*4kB (UME) 34*8kB (ME) 88*16kB (UME) 55*32kB (UME) 251*64kB (UME) 126*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53324kB [ 868.154122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.163885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 868.172504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.181390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 868.190040] 9694 total pagecache pages [ 868.193923] 0 pages in swap cache [ 868.197357] Swap cache stats: add 0, delete 0, find 0/0 [ 868.203141] Free swap = 0kB [ 868.206156] Total swap = 0kB [ 868.209751] 1965979 pages RAM [ 868.212851] 0 pages HighMem/MovableOnly [ 868.216922] 339053 pages reserved [ 868.222490] 0 pages cma reserved [ 868.225861] Out of memory: Kill process 31318 (syz-executor.5) score 1007 or sacrifice child [ 868.235122] Killed process 31318 (syz-executor.5) total-vm:74840kB, anon-rss:14036kB, file-rss:39212kB, shmem-rss:0kB [ 868.273513] oom_reaper: reaped process 31318 (syz-executor.5), now anon-rss:14080kB, file-rss:5364kB, shmem-rss:0kB [ 868.305068] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 868.318351] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 868.386303] CPU: 1 PID: 31324 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 868.395535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.404986] Call Trace: [ 868.407593] dump_stack+0x13e/0x194 [ 868.411235] dump_header+0x178/0x6d4 [ 868.414952] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 868.419976] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 868.425168] ? ___ratelimit+0x50/0x519 [ 868.429064] oom_kill_process.cold+0x10/0xae3 [ 868.434955] ? lock_acquire+0x170/0x3f0 [ 868.438939] ? lock_downgrade+0x6e0/0x6e0 [ 868.443102] out_of_memory+0x2d5/0x1110 [ 868.447265] ? oom_killer_disable+0x1c0/0x1c0 [ 868.451793] ? mutex_trylock+0x152/0x1a0 [ 868.456120] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 868.461080] ? warn_alloc+0xf0/0xf0 [ 868.464821] __alloc_pages_nodemask+0x5d3/0x700 [ 868.469673] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 868.475302] ? preempt_schedule_common+0x4a/0xc0 [ 868.480066] alloc_pages_vma+0xc2/0x4a0 [ 868.484045] __handle_mm_fault+0x17b6/0x3280 [ 868.488459] ? copy_page_range+0x1d70/0x1d70 [ 868.492973] ? find_held_lock+0x2d/0x110 [ 868.497129] handle_mm_fault+0x288/0x7a0 [ 868.501200] __get_user_pages+0x44d/0x11e0 [ 868.505549] ? follow_page_mask+0x1580/0x1580 [ 868.510073] ? perf_trace_lock+0x109/0x4b0 [ 868.514404] ? lock_acquire+0x170/0x3f0 [ 868.518378] ? __mm_populate+0x1e3/0x2c0 [ 868.522445] populate_vma_page_range+0x17b/0x210 [ 868.527993] __mm_populate+0x195/0x2c0 [ 868.532063] ? populate_vma_page_range+0x210/0x210 [ 868.537003] ? security_capable+0x88/0xb0 [ 868.541158] SyS_mlockall+0x3f5/0x520 [ 868.544957] ? SyS_munlock+0xf0/0xf0 [ 868.548692] do_syscall_64+0x1d5/0x640 [ 868.553211] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 868.558402] RIP: 0033:0x45ca29 [ 868.561594] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 868.569310] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 868.576588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 868.583860] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 868.591137] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 868.598497] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fb9c190f6d4 [ 868.945469] Mem-Info: [ 868.947966] active_anon:262680 inactive_anon:1063958 isolated_anon:0 [ 868.947966] active_file:21 inactive_file:12 isolated_file:0 [ 868.947966] unevictable:31377 dirty:0 writeback:0 unstable:0 [ 868.947966] slab_reclaimable:19490 slab_unreclaimable:108160 [ 868.947966] mapped:59124 shmem:4218 pagetables:14227 bounce:0 [ 868.947966] free:24992 free_pcp:31 free_cma:0 [ 868.995173] Node 0 active_anon:1040016kB inactive_anon:637708kB active_file:84kB inactive_file:36kB unevictable:113696kB isolated(anon):0kB isolated(file):0kB mapped:235236kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 869.174227] Node 1 active_anon:10704kB inactive_anon:3618124kB active_file:16kB inactive_file:0kB unevictable:11812kB isolated(anon):0kB isolated(file):0kB mapped:1260kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 869.374066] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 869.496447] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 869.507278] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:1040004kB inactive_anon:632636kB active_file:128kB inactive_file:72kB unevictable:113636kB writepending:0kB present:3129332kB managed:2621260kB mlocked:113636kB kernel_stack:13024kB pagetables:24964kB bounce:0kB free_pcp:128kB local_pcp:124kB free_cma:0kB [ 869.632649] lowmem_reserve[]: 0 0 0 0 0 [ 869.655582] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 869.772568] lowmem_reserve[]: 0 0 0 0 0 [ 869.777436] Node 1 Normal free:53324kB min:53612kB low:67012kB high:80412kB active_anon:10704kB inactive_anon:3622524kB active_file:16kB inactive_file:0kB unevictable:7412kB writepending:0kB present:3932160kB managed:3870192kB mlocked:7408kB kernel_stack:8768kB pagetables:31900kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 869.807950] lowmem_reserve[]: 0 0 0 0 0 [ 869.814045] Node 0 DMA: 4*4kB (UE) 7*8kB (UME) 4*16kB (UE) 6*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 869.830788] Node 0 DMA32: 2052*4kB (UME) 1286*8kB (UME) 362*16kB (UME) 227*32kB (UME) 120*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47936kB [ 869.847211] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 869.858703] Node 1 Normal: 239*4kB (UME) 182*8kB (UME) 172*16kB (UME) 85*32kB (UME) 253*64kB (UME) 126*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 57100kB 07:50:39 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 869.970590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 870.020532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 870.069933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 870.126481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:50:39 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 870.168772] 10848 total pagecache pages [ 870.196845] 0 pages in swap cache [ 870.215546] Swap cache stats: add 0, delete 0, find 0/0 [ 870.246209] Free swap = 0kB [ 870.259604] Total swap = 0kB [ 870.278842] 1965979 pages RAM [ 870.302590] 0 pages HighMem/MovableOnly [ 870.322081] 339053 pages reserved [ 870.340107] 0 pages cma reserved [ 870.357725] Out of memory: Kill process 20807 (syz-executor.3) score 1007 or sacrifice child [ 870.407328] Killed process 20807 (syz-executor.3) total-vm:75104kB, anon-rss:18380kB, file-rss:34628kB, shmem-rss:0kB 07:50:39 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:39 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0xfffffefc) [ 871.446696] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 871.578706] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 871.636016] CPU: 1 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 871.643844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.657291] Call Trace: [ 871.659886] dump_stack+0x13e/0x194 [ 871.663537] dump_header+0x178/0x6d4 [ 871.667352] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 871.672373] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 871.677480] ? ___ratelimit+0x50/0x519 [ 871.681378] oom_kill_process.cold+0x10/0xae3 [ 871.685918] ? lock_downgrade+0x6e0/0x6e0 [ 871.690092] out_of_memory+0x2d5/0x1110 [ 871.694184] ? oom_killer_disable+0x1c0/0x1c0 [ 871.698945] ? mutex_trylock+0x152/0x1a0 [ 871.703011] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 871.707873] ? warn_alloc+0xf0/0xf0 [ 871.711560] __alloc_pages_nodemask+0x5d3/0x700 [ 871.716233] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 871.721255] ? lock_downgrade+0x6e0/0x6e0 [ 871.725419] alloc_pages_current+0xe7/0x1e0 [ 871.729749] __page_cache_alloc+0x245/0x3d0 [ 871.734079] filemap_fault+0xc18/0x1c50 [ 871.738066] ? __lock_page_or_retry+0x8a0/0x8a0 [ 871.743350] ? lock_acquire+0x170/0x3f0 [ 871.747347] ? ext4_filemap_fault+0x7c/0xb0 [ 871.752202] ext4_filemap_fault+0x84/0xb0 [ 871.756369] __do_fault+0xfa/0x380 [ 871.759923] __handle_mm_fault+0x22e9/0x3280 [ 871.764337] ? copy_page_range+0x1d70/0x1d70 [ 871.768760] ? find_held_lock+0x2d/0x110 [ 871.773010] handle_mm_fault+0x288/0x7a0 [ 871.777102] __do_page_fault+0x4bc/0xb40 [ 871.781176] ? vmalloc_fault+0xdf0/0xdf0 [ 871.785256] ? do_page_fault+0x60/0x4f2 [ 871.789316] ? page_fault+0x2f/0x50 [ 871.792942] page_fault+0x45/0x50 [ 871.796919] RIP: 75b22e40:0xd469a [ 871.800622] RSP: d46cf:0000000000000911 EFLAGS: 0000000d [ 873.059156] Mem-Info: [ 873.168437] active_anon:262741 inactive_anon:1066031 isolated_anon:0 [ 873.168437] active_file:2762 inactive_file:2880 isolated_file:96 [ 873.168437] unevictable:21321 dirty:0 writeback:0 unstable:0 [ 873.168437] slab_reclaimable:19469 slab_unreclaimable:108433 [ 873.168437] mapped:58054 shmem:4218 pagetables:14279 bounce:0 [ 873.168437] free:26407 free_pcp:351 free_cma:0 07:50:42 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:42 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 873.465883] Node 0 active_anon:1040436kB inactive_anon:619356kB active_file:6476kB inactive_file:8168kB unevictable:112584kB isolated(anon):0kB isolated(file):128kB mapped:241120kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 873.664098] Node 1 active_anon:10728kB inactive_anon:3618224kB active_file:32kB inactive_file:160kB unevictable:12160kB isolated(anon):0kB isolated(file):0kB mapped:5496kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 873.808486] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:8kB inactive_file:0kB unevictable:36kB writepending:0kB present:15992kB managed:15908kB mlocked:36kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.002132] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 874.034722] Node 0 DMA32 free:36164kB min:36272kB low:45340kB high:54408kB active_anon:1040268kB inactive_anon:614356kB active_file:3156kB inactive_file:2844kB unevictable:125236kB writepending:0kB present:3129332kB managed:2621260kB mlocked:125236kB kernel_stack:13152kB pagetables:25252kB bounce:0kB free_pcp:856kB local_pcp:140kB free_cma:0kB [ 874.262652] lowmem_reserve[]: 0 0 0 0 0 [ 874.289344] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.352682] lowmem_reserve[]: 0 0 0 0 0 [ 874.356737] Node 1 Normal free:53396kB min:53612kB low:67012kB high:80412kB active_anon:10584kB inactive_anon:3618128kB active_file:368kB inactive_file:416kB unevictable:12364kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12364kB kernel_stack:8864kB pagetables:31912kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 874.386897] lowmem_reserve[]: 0 0 0 0 0 [ 874.390953] Node 0 DMA: 5*4kB (UME) 3*8kB (UME) 5*16kB (UE) 6*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 874.407384] Node 0 DMA32: 1042*4kB (UM) 339*8kB (UME) 415*16kB (UME) 218*32kB (UME) 115*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36560kB [ 874.423007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 874.436031] Node 1 Normal: 190*4kB (UME) 41*8kB (ME) 155*16kB (UME) 73*32kB (UME) 232*64kB (UME) 126*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53776kB [ 874.452018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.545809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.604623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.683987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.751851] 14981 total pagecache pages [ 874.755874] 0 pages in swap cache [ 874.782514] Swap cache stats: add 0, delete 0, find 0/0 [ 874.788158] Free swap = 0kB [ 874.803131] Total swap = 0kB [ 874.806181] 1965979 pages RAM [ 874.816210] 0 pages HighMem/MovableOnly [ 874.829363] 339053 pages reserved [ 874.836509] 0 pages cma reserved [ 874.862214] Out of memory: Kill process 31332 (syz-executor.4) score 1009 or sacrifice child [ 875.037918] oom_reaper: reaped process 31342 (syz-executor.1), now anon-rss:18020kB, file-rss:20332kB, shmem-rss:0kB [ 875.117220] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 875.160623] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 875.178707] CPU: 0 PID: 6362 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 875.186873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.196745] Call Trace: [ 875.199783] dump_stack+0x13e/0x194 [ 875.203589] dump_header+0x178/0x6d4 [ 875.207328] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 875.212350] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 875.217722] ? ___ratelimit+0x50/0x519 [ 875.221619] oom_kill_process.cold+0x10/0xae3 [ 875.226120] ? lock_downgrade+0x6e0/0x6e0 [ 875.230276] out_of_memory+0x2d5/0x1110 [ 875.234260] ? oom_killer_disable+0x1c0/0x1c0 [ 875.238757] ? mutex_trylock+0x152/0x1a0 [ 875.242815] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 875.247669] ? warn_alloc+0xf0/0xf0 [ 875.251298] ? find_held_lock+0x2d/0x110 [ 875.255347] ? fs_reclaim_acquire+0x10/0x10 [ 875.260060] __alloc_pages_nodemask+0x5d3/0x700 [ 875.264708] ? __alloc_pages_nodemask+0x5e0/0x700 [ 875.270693] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 875.275869] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 875.280959] ? cache_grow_begin+0x32d/0x410 [ 875.285552] cache_grow_begin+0x7b/0x410 [ 875.289689] fallback_alloc+0x205/0x2b0 [ 875.295736] kmem_cache_alloc+0x1ea/0x770 [ 875.299991] ? nanosleep_copyout+0x100/0x100 [ 875.304571] getname_flags+0xc8/0x560 [ 875.308536] ? enqueue_hrtimer+0x3b0/0x3b0 [ 875.312766] do_sys_open+0x1c4/0x3f0 [ 875.316654] ? filp_open+0x60/0x60 [ 875.320269] ? hrtimer_nanosleep+0x460/0x460 [ 875.324801] ? do_syscall_64+0x4c/0x640 [ 875.328765] ? do_sys_open+0x3f0/0x3f0 [ 875.333187] do_syscall_64+0x1d5/0x640 [ 875.337258] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 875.342774] RIP: 0033:0x45aa00 [ 875.345951] RSP: 002b:00007ffc2ed26ce0 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 875.353646] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045aa00 [ 875.361338] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004c15bb [ 875.368597] RBP: 0000000000000cc7 R08: 0000000000000001 R09: 000000000279a940 [ 875.376021] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 875.383456] R13: 00007ffc2ed26dc0 R14: 00000000000d498f R15: 00007ffc2ed26dd0 [ 875.403006] Mem-Info: [ 875.409669] active_anon:262701 inactive_anon:1059363 isolated_anon:0 [ 875.409669] active_file:1889 inactive_file:2040 isolated_file:32 [ 875.409669] unevictable:29396 dirty:0 writeback:0 unstable:0 [ 875.409669] slab_reclaimable:19558 slab_unreclaimable:107695 [ 875.409669] mapped:59551 shmem:4218 pagetables:14165 bounce:0 [ 875.409669] free:27678 free_pcp:432 free_cma:0 07:50:44 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:44 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:44 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 875.702634] Node 0 active_anon:1040428kB inactive_anon:631572kB active_file:13964kB inactive_file:5820kB unevictable:96204kB isolated(anon):0kB isolated(file):0kB mapped:239020kB dirty:100kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 927744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 875.898758] Node 1 active_anon:10676kB inactive_anon:3618128kB active_file:64kB inactive_file:52kB unevictable:13340kB isolated(anon):0kB isolated(file):0kB mapped:8284kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 876.042677] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.072454] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 876.081883] Node 0 DMA32 free:36600kB min:36272kB low:45340kB high:54408kB active_anon:1040236kB inactive_anon:614296kB active_file:2372kB inactive_file:2200kB unevictable:123240kB writepending:196kB present:3129332kB managed:2621260kB mlocked:123240kB kernel_stack:13056kB pagetables:25112kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 876.119729] lowmem_reserve[]: 0 0 0 0 0 [ 876.124031] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.212649] lowmem_reserve[]: 0 0 0 0 0 [ 876.236050] Node 1 Normal free:53156kB min:53612kB low:67012kB high:80412kB active_anon:10592kB inactive_anon:3618212kB active_file:12kB inactive_file:16kB unevictable:13948kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13948kB kernel_stack:8832kB pagetables:31904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.271565] lowmem_reserve[]: 0 0 0 0 0 [ 876.276654] Node 0 DMA: 4*4kB (UE) 3*8kB (UME) 5*16kB (UE) 6*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 876.299401] Node 0 DMA32: 985*4kB (UE) 26*8kB (ME) 360*16kB (UME) 244*32kB (UME) 114*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 35764kB [ 876.399133] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 876.410348] Node 1 Normal: 189*4kB (UME) 42*8kB (UME) 169*16kB (UME) 79*32kB (UME) 217*64kB (UME) 126*128kB (UM) 44*256kB (UM) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53236kB [ 876.427174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.436391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.445062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.453981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 876.476073] 14036 total pagecache pages [ 876.480174] 0 pages in swap cache [ 876.483636] Swap cache stats: add 0, delete 0, find 0/0 [ 876.489128] Free swap = 0kB [ 876.492226] Total swap = 0kB [ 876.495239] 1965979 pages RAM [ 876.498406] 0 pages HighMem/MovableOnly [ 876.502372] 339053 pages reserved [ 876.505914] 0 pages cma reserved [ 876.510406] Out of memory: Kill process 31351 (syz-executor.3) score 1009 or sacrifice child 07:50:46 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:46 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 877.586863] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 877.602253] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 877.607917] CPU: 0 PID: 31392 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 877.616663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.626019] Call Trace: [ 877.628613] dump_stack+0x13e/0x194 [ 877.632419] dump_header+0x178/0x6d4 [ 877.636130] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 877.641145] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 877.646246] ? ___ratelimit+0x50/0x519 [ 877.650142] oom_kill_process.cold+0x10/0xae3 [ 877.654736] ? lock_acquire+0x170/0x3f0 [ 877.658740] ? lock_downgrade+0x6e0/0x6e0 [ 877.662895] out_of_memory+0x2d5/0x1110 [ 877.667967] ? oom_killer_disable+0x1c0/0x1c0 [ 877.672449] ? mutex_trylock+0x152/0x1a0 [ 877.676505] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 877.683874] ? warn_alloc+0xf0/0xf0 [ 877.687506] __alloc_pages_nodemask+0x5d3/0x700 [ 877.692261] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 877.697276] ? find_held_lock+0x2d/0x110 [ 877.701508] alloc_pages_vma+0xc2/0x4a0 [ 877.705473] __handle_mm_fault+0x17b6/0x3280 [ 877.710138] ? copy_page_range+0x1d70/0x1d70 [ 877.714533] ? find_held_lock+0x2d/0x110 [ 877.718610] handle_mm_fault+0x288/0x7a0 [ 877.722849] __get_user_pages+0x44d/0x11e0 [ 877.727089] ? follow_page_mask+0x1580/0x1580 [ 877.731584] ? perf_trace_lock+0x109/0x4b0 [ 877.735813] ? lock_acquire+0x170/0x3f0 [ 877.739793] ? __mm_populate+0x1e3/0x2c0 [ 877.743901] populate_vma_page_range+0x17b/0x210 [ 877.749128] __mm_populate+0x195/0x2c0 [ 877.753007] ? populate_vma_page_range+0x210/0x210 [ 877.757931] ? security_capable+0x88/0xb0 [ 877.762181] SyS_mlockall+0x3f5/0x520 [ 877.765975] ? SyS_munlock+0xf0/0xf0 [ 877.769673] do_syscall_64+0x1d5/0x640 [ 877.773548] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 877.779173] RIP: 0033:0x45ca29 [ 877.782711] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 877.790499] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 877.798012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 877.805270] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 877.812724] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 877.820067] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 [ 877.829955] Mem-Info: [ 877.832833] active_anon:262736 inactive_anon:1059386 isolated_anon:0 [ 877.832833] active_file:14 inactive_file:11 isolated_file:0 [ 877.832833] unevictable:36006 dirty:0 writeback:17 unstable:0 [ 877.832833] slab_reclaimable:19582 slab_unreclaimable:107759 [ 877.832833] mapped:63933 shmem:4218 pagetables:14212 bounce:0 [ 877.832833] free:24998 free_pcp:55 free_cma:0 [ 877.898206] Node 0 active_anon:1040340kB inactive_anon:619388kB active_file:52kB inactive_file:64kB unevictable:128284kB isolated(anon):0kB isolated(file):0kB mapped:244524kB dirty:0kB writeback:48kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 877.898229] Node 1 active_anon:10604kB inactive_anon:3618156kB active_file:0kB inactive_file:0kB unevictable:15840kB isolated(anon):0kB isolated(file):0kB mapped:11308kB dirty:0kB writeback:20kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 877.898234] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 877.898256] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 878.445325] Node 0 DMA32 free:35896kB min:36272kB low:45340kB high:54408kB active_anon:1040332kB inactive_anon:614252kB active_file:156kB inactive_file:0kB unevictable:128304kB writepending:0kB present:3129332kB managed:2621260kB mlocked:128304kB kernel_stack:13120kB pagetables:24864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.494272] lowmem_reserve[]: 0 0 0 0 0 [ 878.551658] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.711126] lowmem_reserve[]: 0 0 0 0 0 [ 878.715504] Node 1 Normal free:53476kB min:53612kB low:67012kB high:80412kB active_anon:10604kB inactive_anon:3620140kB active_file:1988kB inactive_file:4456kB unevictable:5856kB writepending:0kB present:3932160kB managed:3870192kB mlocked:5584kB kernel_stack:8800kB pagetables:31992kB bounce:0kB free_pcp:628kB local_pcp:628kB free_cma:0kB 07:50:47 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:50:48 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:48 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 878.962960] lowmem_reserve[]: 0 0 0 0 0 [ 878.988006] Node 0 DMA: 8*4kB (UME) 2*8kB (UE) 7*16kB (UME) 6*32kB (UM) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 879.081724] Node 0 DMA32: 910*4kB (UME) 330*8kB (UME) 354*16kB (ME) 244*32kB (UME) 128*64kB (UME) 58*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36648kB [ 879.194012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 879.256651] Node 1 Normal: 162*4kB (UME) 44*8kB (UME) 148*16kB (UME) 278*32kB (UME) 116*64kB (UE) 125*128kB (UM) 45*256kB (UM) 13*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53864kB [ 879.340390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.388992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 879.401759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.422664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 879.476014] 12869 total pagecache pages [ 879.487439] 0 pages in swap cache [ 879.494182] Swap cache stats: add 0, delete 0, find 0/0 [ 879.524933] Free swap = 0kB [ 879.531485] Total swap = 0kB [ 879.535454] 1965979 pages RAM [ 879.543824] 0 pages HighMem/MovableOnly [ 879.552650] 339053 pages reserved [ 879.557382] 0 pages cma reserved [ 879.565962] Out of memory: Kill process 31375 (syz-executor.5) score 1009 or sacrifice child [ 879.803599] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 879.929359] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 879.989398] CPU: 0 PID: 31411 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 879.998015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.007467] Call Trace: [ 880.010763] dump_stack+0x13e/0x194 [ 880.014399] dump_header+0x178/0x6d4 [ 880.018117] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 880.023151] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 880.029568] ? ___ratelimit+0x50/0x519 [ 880.033824] oom_kill_process.cold+0x10/0xae3 [ 880.038576] ? lock_downgrade+0x6e0/0x6e0 [ 880.043167] out_of_memory+0x2d5/0x1110 [ 880.047132] ? oom_killer_disable+0x1c0/0x1c0 [ 880.051727] ? mutex_trylock+0x152/0x1a0 [ 880.055788] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 880.060661] ? warn_alloc+0xf0/0xf0 [ 880.064280] __alloc_pages_nodemask+0x5d3/0x700 [ 880.069001] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 880.074029] ? find_held_lock+0x2d/0x110 [ 880.079039] alloc_pages_vma+0xc2/0x4a0 [ 880.083100] __handle_mm_fault+0x17b6/0x3280 [ 880.087505] ? copy_page_range+0x1d70/0x1d70 [ 880.092207] ? find_held_lock+0x2d/0x110 [ 880.096431] handle_mm_fault+0x288/0x7a0 [ 880.100551] __get_user_pages+0x44d/0x11e0 [ 880.104793] ? follow_page_mask+0x1580/0x1580 [ 880.109498] ? perf_trace_lock+0x109/0x4b0 [ 880.113728] ? lock_acquire+0x170/0x3f0 [ 880.117779] ? __mm_populate+0x1e3/0x2c0 [ 880.121998] populate_vma_page_range+0x17b/0x210 [ 880.126770] __mm_populate+0x195/0x2c0 [ 880.130664] ? populate_vma_page_range+0x210/0x210 [ 880.135593] ? security_capable+0x88/0xb0 [ 880.139852] SyS_mlockall+0x3f5/0x520 [ 880.143771] ? SyS_munlock+0xf0/0xf0 [ 880.147473] do_syscall_64+0x1d5/0x640 [ 880.151353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 880.156540] RIP: 0033:0x45ca29 [ 880.159893] RSP: 002b:00007fa0858c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 880.167882] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 880.175601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 880.183039] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 880.190447] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 880.197729] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fa0858ca6d4 [ 880.209773] Mem-Info: [ 880.212467] active_anon:263376 inactive_anon:1061638 isolated_anon:0 [ 880.212467] active_file:22 inactive_file:22 isolated_file:0 [ 880.212467] unevictable:33237 dirty:0 writeback:0 unstable:0 [ 880.212467] slab_reclaimable:19628 slab_unreclaimable:107635 [ 880.212467] mapped:61736 shmem:4218 pagetables:14326 bounce:0 [ 880.212467] free:24949 free_pcp:32 free_cma:0 [ 880.247137] Node 0 active_anon:1042844kB inactive_anon:626964kB active_file:96kB inactive_file:64kB unevictable:112100kB isolated(anon):0kB isolated(file):0kB mapped:238320kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 935936kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 880.277797] Node 1 active_anon:10660kB inactive_anon:3619588kB active_file:8kB inactive_file:8kB unevictable:20848kB isolated(anon):0kB isolated(file):0kB mapped:8624kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 880.312409] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:48kB writepending:0kB present:15992kB managed:15908kB mlocked:48kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.422215] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 880.433275] Node 0 DMA32 free:37224kB min:36272kB low:45340kB high:54408kB active_anon:1042832kB inactive_anon:637464kB active_file:4228kB inactive_file:4708kB unevictable:84092kB writepending:0kB present:3129332kB managed:2621260kB mlocked:84032kB kernel_stack:13184kB pagetables:25256kB bounce:0kB free_pcp:1272kB local_pcp:552kB free_cma:0kB [ 880.465885] lowmem_reserve[]: 0 0 0 0 0 [ 880.486365] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:50:49 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x0, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:49 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 880.693406] lowmem_reserve[]: 0 0 0 0 0 [ 880.725199] Node 1 Normal free:56764kB min:53612kB low:67012kB high:80412kB active_anon:10660kB inactive_anon:3618472kB active_file:532kB inactive_file:268kB unevictable:18356kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18676kB kernel_stack:8800kB pagetables:32004kB bounce:0kB free_pcp:228kB local_pcp:84kB free_cma:0kB [ 880.943115] lowmem_reserve[]: 0 0 0 0 0 [ 880.974711] Node 0 DMA: 5*4kB (UME) 3*8kB (UME) 6*16kB (UME) 5*32kB (U) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10412kB [ 881.063547] Node 0 DMA32: 1081*4kB (UME) 91*8kB (ME) 352*16kB (UME) 121*32kB (UME) 133*64kB (UME) 60*128kB (UME) 6*256kB (UM) 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 36380kB [ 881.132875] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 881.153793] Node 1 Normal: 198*4kB (UME) 37*8kB (UME) 155*16kB (UME) 320*32kB (UME) 115*64kB (UME) 97*128kB (UM) 46*256kB (UM) 15*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53040kB [ 881.170897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.179990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 881.188872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.198425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 881.207569] 15671 total pagecache pages [ 881.212596] 0 pages in swap cache [ 881.216240] Swap cache stats: add 0, delete 0, find 0/0 [ 881.221858] Free swap = 0kB [ 881.225034] Total swap = 0kB [ 881.228267] 1965979 pages RAM [ 881.231672] 0 pages HighMem/MovableOnly [ 881.236052] 339053 pages reserved [ 881.240085] 0 pages cma reserved [ 881.243643] Out of memory: Kill process 31396 (syz-executor.3) score 1008 or sacrifice child [ 881.707520] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 881.765780] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 881.804607] CPU: 1 PID: 31400 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 881.812526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.821889] Call Trace: [ 881.824490] dump_stack+0x13e/0x194 [ 881.828124] dump_header+0x178/0x6d4 [ 881.831866] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 881.836928] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 881.842040] ? ___ratelimit+0x50/0x519 [ 881.845956] oom_kill_process.cold+0x10/0xae3 [ 881.850471] ? lock_downgrade+0x6e0/0x6e0 [ 881.854631] out_of_memory+0x2d5/0x1110 [ 881.858631] ? oom_killer_disable+0x1c0/0x1c0 [ 881.863305] ? mutex_trylock+0x152/0x1a0 [ 881.867556] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 881.872433] ? warn_alloc+0xf0/0xf0 [ 881.876079] __alloc_pages_nodemask+0x5d3/0x700 [ 881.881487] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 881.886512] ? lock_downgrade+0x6e0/0x6e0 [ 881.891282] alloc_pages_current+0xe7/0x1e0 [ 881.895615] __page_cache_alloc+0x245/0x3d0 [ 881.899953] filemap_fault+0xc18/0x1c50 [ 881.904025] ? __lock_page_or_retry+0x8a0/0x8a0 [ 881.908796] ? lock_acquire+0x170/0x3f0 [ 881.912770] ? ext4_filemap_fault+0x7c/0xb0 [ 881.917107] ext4_filemap_fault+0x84/0xb0 [ 881.921256] __do_fault+0xfa/0x380 [ 881.924797] __handle_mm_fault+0x22e9/0x3280 [ 881.929559] ? copy_page_range+0x1d70/0x1d70 [ 881.934624] ? find_held_lock+0x2d/0x110 [ 881.938712] handle_mm_fault+0x288/0x7a0 [ 881.942804] __get_user_pages+0x44d/0x11e0 [ 881.947181] ? follow_page_mask+0x1580/0x1580 [ 881.951679] ? perf_trace_lock+0x109/0x4b0 [ 881.955938] ? lock_acquire+0x170/0x3f0 [ 881.960374] ? __mm_populate+0x1e3/0x2c0 [ 881.964476] populate_vma_page_range+0x17b/0x210 [ 881.969229] __mm_populate+0x195/0x2c0 [ 881.973115] ? populate_vma_page_range+0x210/0x210 [ 881.978030] ? security_capable+0x88/0xb0 [ 881.982208] SyS_mlockall+0x3f5/0x520 [ 881.985996] ? SyS_munlock+0xf0/0xf0 [ 881.989696] do_syscall_64+0x1d5/0x640 [ 881.993591] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 881.999388] RIP: 0033:0x45ca29 [ 882.002646] RSP: 002b:00007f9c04015c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 882.010352] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 882.017606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 882.024888] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 882.032339] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 882.039597] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f9c040166d4 [ 882.086190] Mem-Info: [ 882.123222] active_anon:262745 inactive_anon:1059438 isolated_anon:0 [ 882.123222] active_file:183 inactive_file:947 isolated_file:32 [ 882.123222] unevictable:34852 dirty:0 writeback:0 unstable:0 [ 882.123222] slab_reclaimable:19635 slab_unreclaimable:107719 [ 882.123222] mapped:65469 shmem:4218 pagetables:14279 bounce:0 [ 882.123222] free:24958 free_pcp:189 free_cma:0 07:50:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:50:51 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 882.305140] Node 0 active_anon:1040472kB inactive_anon:624924kB active_file:5880kB inactive_file:13968kB unevictable:86528kB isolated(anon):0kB isolated(file):0kB mapped:243648kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:50:51 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 882.502983] Node 1 active_anon:10608kB inactive_anon:3618120kB active_file:600kB inactive_file:708kB unevictable:19132kB isolated(anon):0kB isolated(file):0kB mapped:8628kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 882.644239] Node 0 DMA free:10412kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:28kB unevictable:44kB writepending:0kB present:15992kB managed:15908kB mlocked:44kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.733591] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 882.781032] Node 0 DMA32 free:35964kB min:36272kB low:45340kB high:54408kB active_anon:1040176kB inactive_anon:614636kB active_file:648kB inactive_file:252kB unevictable:117476kB writepending:0kB present:3129332kB managed:2621260kB mlocked:117476kB kernel_stack:13056kB pagetables:24960kB bounce:0kB free_pcp:556kB local_pcp:556kB free_cma:0kB [ 882.955054] lowmem_reserve[]: 0 0 0 0 0 [ 882.981235] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.065783] lowmem_reserve[]: 0 0 0 0 0 [ 883.076784] Node 1 Normal free:53444kB min:53612kB low:67012kB high:80412kB active_anon:10736kB inactive_anon:3618124kB active_file:0kB inactive_file:36kB unevictable:22880kB writepending:8kB present:3932160kB managed:3870192kB mlocked:22880kB kernel_stack:8800kB pagetables:31948kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.261796] lowmem_reserve[]: 0 0 0 0 0 [ 883.266008] Node 0 DMA: 10*4kB (UME) 6*8kB (UME) 6*16kB (UME) 5*32kB (U) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10456kB [ 883.291145] Node 0 DMA32: 1253*4kB (UME) 748*8kB (UME) 223*16kB (UME) 135*32kB (UME) 133*64kB (UME) 60*128kB (UME) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36612kB [ 883.307143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 883.348845] Node 1 Normal: 203*4kB (UME) 61*8kB (UME) 51*16kB (UME) 334*32kB (UE) 147*64kB (UME) 98*128kB (UM) 46*256kB (UM) 15*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54212kB [ 883.499957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.509103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 883.517940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.527106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 883.536169] 13743 total pagecache pages [ 883.540293] 0 pages in swap cache [ 883.543777] Swap cache stats: add 0, delete 0, find 0/0 [ 883.549241] Free swap = 0kB [ 883.552264] Total swap = 0kB [ 883.555278] 1965979 pages RAM [ 883.559196] 0 pages HighMem/MovableOnly [ 883.563231] 339053 pages reserved [ 883.566770] 0 pages cma reserved [ 883.570218] Out of memory: Kill process 31399 (syz-executor.0) score 1009 or sacrifice child [ 883.583689] Killed process 31400 (syz-executor.0) total-vm:74972kB, anon-rss:18028kB, file-rss:50476kB, shmem-rss:0kB [ 883.603251] oom_reaper: reaped process 31400 (syz-executor.0), now anon-rss:18020kB, file-rss:16500kB, shmem-rss:0kB 07:50:53 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:53 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x0, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:53 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 884.470785] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 884.556673] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 884.596964] CPU: 1 PID: 31447 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 884.605828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.615205] Call Trace: [ 884.617800] dump_stack+0x13e/0x194 [ 884.621440] dump_header+0x178/0x6d4 [ 884.625186] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 884.630209] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 884.636273] ? ___ratelimit+0x50/0x519 [ 884.640172] oom_kill_process.cold+0x10/0xae3 [ 884.644849] ? lock_downgrade+0x6e0/0x6e0 [ 884.649018] out_of_memory+0x2d5/0x1110 [ 884.653084] ? oom_killer_disable+0x1c0/0x1c0 [ 884.657676] ? mutex_trylock+0x152/0x1a0 [ 884.662005] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 884.667043] ? warn_alloc+0xf0/0xf0 [ 884.670694] __alloc_pages_nodemask+0x5d3/0x700 [ 884.675380] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 884.680580] ? find_held_lock+0x2d/0x110 [ 884.684745] alloc_pages_vma+0xc2/0x4a0 [ 884.688732] __handle_mm_fault+0x17b6/0x3280 [ 884.693229] ? copy_page_range+0x1d70/0x1d70 [ 884.697654] ? find_held_lock+0x2d/0x110 [ 884.701733] handle_mm_fault+0x288/0x7a0 [ 884.705974] __get_user_pages+0x44d/0x11e0 [ 884.710220] ? follow_page_mask+0x1580/0x1580 [ 884.714718] ? perf_trace_lock+0x109/0x4b0 [ 884.719061] populate_vma_page_range+0x17b/0x210 [ 884.723822] __mm_populate+0x195/0x2c0 [ 884.727717] ? populate_vma_page_range+0x210/0x210 [ 884.733088] ? security_capable+0x88/0xb0 [ 884.737416] SyS_mlockall+0x3f5/0x520 [ 884.741310] ? SyS_munlock+0xf0/0xf0 [ 884.745129] do_syscall_64+0x1d5/0x640 [ 884.749122] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 884.754322] RIP: 0033:0x45ca29 [ 884.757942] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 884.765833] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 884.773306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 884.781111] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 884.788564] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 884.795922] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fb9c190f6d4 [ 885.060448] Mem-Info: [ 885.063713] active_anon:262722 inactive_anon:1059363 isolated_anon:0 [ 885.063713] active_file:34 inactive_file:0 isolated_file:0 [ 885.063713] unevictable:35853 dirty:0 writeback:0 unstable:0 [ 885.063713] slab_reclaimable:19565 slab_unreclaimable:108110 [ 885.063713] mapped:64459 shmem:4218 pagetables:14253 bounce:0 [ 885.063713] free:24962 free_pcp:1 free_cma:0 [ 885.131766] Node 0 active_anon:1040184kB inactive_anon:619328kB active_file:4kB inactive_file:68kB unevictable:119316kB isolated(anon):0kB isolated(file):0kB mapped:243312kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 885.180971] Node 1 active_anon:10704kB inactive_anon:3618124kB active_file:12kB inactive_file:4kB unevictable:24096kB isolated(anon):0kB isolated(file):0kB mapped:14524kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 885.222666] Node 0 DMA free:10412kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:100kB writepending:0kB present:15992kB managed:15908kB mlocked:100kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.265826] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 885.284427] Node 0 DMA32 free:35824kB min:36272kB low:45340kB high:54408kB active_anon:1040172kB inactive_anon:614256kB active_file:132kB inactive_file:4kB unevictable:118716kB writepending:0kB present:3129332kB managed:2621260kB mlocked:118716kB kernel_stack:13120kB pagetables:24912kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 885.328341] lowmem_reserve[]: 0 0 0 0 0 [ 885.332458] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.371501] lowmem_reserve[]: 0 0 0 0 0 [ 885.375619] Node 1 Normal free:53516kB min:53612kB low:67012kB high:80412kB active_anon:10704kB inactive_anon:3618124kB active_file:16kB inactive_file:0kB unevictable:24096kB writepending:0kB present:3932160kB managed:3870192kB mlocked:24096kB kernel_stack:8896kB pagetables:32056kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.419788] lowmem_reserve[]: 0 0 0 0 0 [ 885.423914] Node 0 DMA: 5*4kB (UE) 3*8kB (UE) 4*16kB (U) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10412kB [ 885.504430] Node 0 DMA32: 1139*4kB (UME) 370*8kB (UME) 457*16kB (UME) 109*32kB (UME) 131*64kB (UME) 60*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36172kB [ 885.586334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 885.645820] Node 1 Normal: 141*4kB (UME) 52*8kB (UME) 49*16kB (UME) 331*32kB (UME) 150*64kB (UME) 93*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53572kB [ 885.749835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.812935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 885.863030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.927282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 885.984816] 14974 total pagecache pages [ 886.008657] 0 pages in swap cache [ 886.026509] Swap cache stats: add 0, delete 0, find 0/0 [ 886.055519] Free swap = 0kB [ 886.075094] Total swap = 0kB [ 886.088309] 1965979 pages RAM [ 886.091451] 0 pages HighMem/MovableOnly [ 886.095424] 339053 pages reserved [ 886.103199] 0 pages cma reserved [ 886.106593] Out of memory: Kill process 31434 (syz-executor.5) score 1009 or sacrifice child [ 886.115702] Killed process 31437 (syz-executor.5) total-vm:74972kB, anon-rss:18032kB, file-rss:49836kB, shmem-rss:0kB [ 886.166716] oom_reaper: reaped process 31437 (syz-executor.5), now anon-rss:18024kB, file-rss:16560kB, shmem-rss:0kB 07:50:55 executing program 5: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) socket$inet6_icmp(0xa, 0x2, 0x3a) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x38d081, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000180)=0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$rose(r4, 0x104, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:50:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:50:56 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:56 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x201, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:50:57 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x0, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x201, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:50:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:50:58 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:50:58 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 890.131337] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 890.283569] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 890.325717] CPU: 1 PID: 6332 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 890.333194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.342721] Call Trace: [ 890.345318] dump_stack+0x13e/0x194 [ 890.348958] dump_header+0x178/0x6d4 [ 890.352676] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 890.357785] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 890.363159] ? ___ratelimit+0x50/0x519 [ 890.370182] oom_kill_process.cold+0x10/0xae3 [ 890.374690] ? lock_acquire+0x170/0x3f0 [ 890.378760] ? lock_downgrade+0x6e0/0x6e0 [ 890.383965] out_of_memory+0x2d5/0x1110 [ 890.388580] ? oom_killer_disable+0x1c0/0x1c0 [ 890.393170] ? mutex_trylock+0x152/0x1a0 [ 890.397856] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 890.402829] ? warn_alloc+0xf0/0xf0 [ 890.406472] __alloc_pages_nodemask+0x5d3/0x700 [ 890.411150] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 890.417649] ? lock_downgrade+0x6e0/0x6e0 [ 890.421807] alloc_pages_current+0xe7/0x1e0 [ 890.426487] __page_cache_alloc+0x245/0x3d0 [ 890.430818] filemap_fault+0xc18/0x1c50 [ 890.435431] ? __lock_page_or_retry+0x8a0/0x8a0 [ 890.440103] ? lock_acquire+0x170/0x3f0 [ 890.444081] ? ext4_filemap_fault+0x7c/0xb0 [ 890.448412] ext4_filemap_fault+0x84/0xb0 [ 890.452557] __do_fault+0xfa/0x380 [ 890.456270] __handle_mm_fault+0x22e9/0x3280 [ 890.461029] ? copy_page_range+0x1d70/0x1d70 [ 890.465443] ? find_held_lock+0x2d/0x110 [ 890.469526] handle_mm_fault+0x288/0x7a0 [ 890.473681] __do_page_fault+0x4bc/0xb40 [ 890.477743] ? vmalloc_fault+0xdf0/0xdf0 [ 890.484462] ? do_page_fault+0x60/0x4f2 [ 890.488544] ? page_fault+0x2f/0x50 [ 890.492276] page_fault+0x45/0x50 [ 890.495819] RIP: 26d2c358: (null) [ 890.500074] RSP: ba3bb4:00007ffc461f8d68 EFLAGS: 00052310 [ 890.529328] Mem-Info: [ 890.544109] active_anon:262752 inactive_anon:1063433 isolated_anon:0 [ 890.544109] active_file:27 inactive_file:11 isolated_file:0 [ 890.544109] unevictable:32554 dirty:0 writeback:0 unstable:0 [ 890.544109] slab_reclaimable:19698 slab_unreclaimable:107150 [ 890.544109] mapped:63340 shmem:4218 pagetables:14263 bounce:0 [ 890.544109] free:24923 free_pcp:0 free_cma:0 [ 890.587229] Node 0 active_anon:1040180kB inactive_anon:632168kB active_file:8kB inactive_file:100kB unevictable:111252kB isolated(anon):0kB isolated(file):72kB mapped:247324kB dirty:0kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 890.616187] Node 1 active_anon:10824kB inactive_anon:3621564kB active_file:8kB inactive_file:0kB unevictable:18964kB isolated(anon):0kB isolated(file):0kB mapped:6076kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 890.646069] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.673171] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 890.678455] Node 0 DMA32 free:36012kB min:36272kB low:45340kB high:54408kB active_anon:1040168kB inactive_anon:627096kB active_file:0kB inactive_file:52kB unevictable:111196kB writepending:0kB present:3129332kB managed:2621260kB mlocked:111196kB kernel_stack:13056kB pagetables:24708kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.709148] lowmem_reserve[]: 0 0 0 0 0 [ 890.713152] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.741735] lowmem_reserve[]: 0 0 0 0 0 [ 890.745721] Node 1 Normal free:53308kB min:53612kB low:67012kB high:80412kB active_anon:10824kB inactive_anon:3621564kB active_file:8kB inactive_file:0kB unevictable:18964kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18964kB kernel_stack:8896kB pagetables:32300kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 890.776699] lowmem_reserve[]: 0 0 0 0 0 [ 890.780835] Node 0 DMA: 6*4kB (UE) 3*8kB (UME) 3*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 890.797281] Node 0 DMA32: 1110*4kB (UMEH) 193*8kB (UME) 339*16kB (UME) 137*32kB (UME) 134*64kB (UME) 62*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36144kB [ 890.813401] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 890.825698] Node 1 Normal: 101*4kB (UME) 55*8kB (UME) 20*16kB (ME) 302*32kB (UME) 168*64kB (UME) 96*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53580kB [ 890.842373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.851442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 890.860224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 890.869117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 890.877758] 13872 total pagecache pages [ 890.881912] 0 pages in swap cache [ 890.885539] Swap cache stats: add 0, delete 0, find 0/0 [ 890.891201] Free swap = 0kB [ 890.894202] Total swap = 0kB [ 890.897235] 1965979 pages RAM [ 890.900834] 0 pages HighMem/MovableOnly [ 890.905315] 339053 pages reserved [ 890.909079] 0 pages cma reserved [ 890.912446] Out of memory: Kill process 31474 (syz-executor.0) score 1009 or sacrifice child [ 890.921592] Killed process 31491 (syz-executor.0) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 890.954671] oom_reaper: reaped process 31491 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 890.974548] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 890.991803] in:imklog cpuset=/ mems_allowed=0-1 [ 890.996664] CPU: 1 PID: 5995 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 891.006835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.017765] Call Trace: [ 891.020375] dump_stack+0x13e/0x194 [ 891.024264] dump_header+0x178/0x6d4 [ 891.028441] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 891.033474] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 891.039462] ? ___ratelimit+0x50/0x519 [ 891.043368] oom_kill_process.cold+0x10/0xae3 [ 891.048051] ? lock_acquire+0x170/0x3f0 [ 891.052120] ? lock_downgrade+0x6e0/0x6e0 [ 891.056284] out_of_memory+0x2d5/0x1110 [ 891.060302] ? oom_killer_disable+0x1c0/0x1c0 [ 891.065079] ? mutex_trylock+0x152/0x1a0 [ 891.069160] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 891.074114] ? warn_alloc+0xf0/0xf0 [ 891.077856] __alloc_pages_nodemask+0x5d3/0x700 [ 891.083382] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 891.088410] ? lock_downgrade+0x6e0/0x6e0 [ 891.092678] alloc_pages_current+0xe7/0x1e0 [ 891.097211] __page_cache_alloc+0x245/0x3d0 [ 891.101537] filemap_fault+0xc18/0x1c50 [ 891.105509] ? __lock_page_or_retry+0x8a0/0x8a0 [ 891.110193] ? lock_acquire+0x170/0x3f0 [ 891.114291] ? ext4_filemap_fault+0x7c/0xb0 [ 891.118800] ext4_filemap_fault+0x84/0xb0 [ 891.123281] __do_fault+0xfa/0x380 [ 891.128142] __handle_mm_fault+0x22e9/0x3280 [ 891.133286] ? copy_page_range+0x1d70/0x1d70 [ 891.138557] ? find_held_lock+0x2d/0x110 [ 891.142625] handle_mm_fault+0x288/0x7a0 [ 891.146679] __do_page_fault+0x4bc/0xb40 [ 891.150734] ? vmalloc_fault+0xdf0/0xdf0 [ 891.154983] ? do_page_fault+0x60/0x4f2 [ 891.158957] ? page_fault+0x2f/0x50 [ 891.162990] page_fault+0x45/0x50 [ 891.166528] RIP: 1fa0:0x1f9f [ 891.169539] RSP: 0000:000055ead4bcd9d0 EFLAGS: 7fd73a9f5da0 [ 891.170739] Mem-Info: [ 891.179429] active_anon:262748 inactive_anon:1063414 isolated_anon:0 [ 891.179429] active_file:22 inactive_file:79 isolated_file:0 [ 891.179429] unevictable:32264 dirty:0 writeback:0 unstable:0 [ 891.179429] slab_reclaimable:19698 slab_unreclaimable:107134 [ 891.179429] mapped:63561 shmem:4218 pagetables:14230 bounce:0 [ 891.179429] free:25187 free_pcp:78 free_cma:0 [ 891.214209] Node 0 active_anon:1040176kB inactive_anon:632092kB active_file:48kB inactive_file:104kB unevictable:110884kB isolated(anon):0kB isolated(file):0kB mapped:248960kB dirty:0kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 891.243418] Node 1 active_anon:10816kB inactive_anon:3621564kB active_file:4kB inactive_file:4kB unevictable:18964kB isolated(anon):0kB isolated(file):0kB mapped:6076kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 891.271648] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:60kB writepending:0kB present:15992kB managed:15908kB mlocked:60kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.336456] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 891.380813] Node 0 DMA32 free:36124kB min:36272kB low:45340kB high:54408kB active_anon:1040164kB inactive_anon:627020kB active_file:48kB inactive_file:104kB unevictable:110824kB writepending:0kB present:3129332kB managed:2621260kB mlocked:110824kB kernel_stack:13024kB pagetables:24708kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.591098] lowmem_reserve[]: 0 0 0 0 0 [ 891.595130] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.716202] lowmem_reserve[]: 0 0 0 0 0 [ 891.725500] Node 1 Normal free:53488kB min:53612kB low:67012kB high:80412kB active_anon:10816kB inactive_anon:3621564kB active_file:4kB inactive_file:0kB unevictable:18964kB writepending:0kB present:3932160kB managed:3870192kB mlocked:18964kB kernel_stack:8896kB pagetables:32172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.778353] lowmem_reserve[]: 0 0 0 0 0 [ 891.782469] Node 0 DMA: 6*4kB (UE) 3*8kB (UME) 3*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 891.798695] Node 0 DMA32: 1394*4kB (UME) 280*8kB (UME) 260*16kB (UE) 117*32kB (UME) 134*64kB (UME) 62*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 38120kB [ 891.814904] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 891.826540] Node 1 Normal: 72*4kB (UME) 57*8kB (UE) 17*16kB (UE) 301*32kB (UE) 163*64kB (UME) 96*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53080kB [ 891.842813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 891.863848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 891.879752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 891.910889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 891.933964] 12577 total pagecache pages [ 891.943918] 0 pages in swap cache [ 891.953149] Swap cache stats: add 0, delete 0, find 0/0 [ 891.968861] Free swap = 0kB 07:50:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000329bd7000fbdbdf251300000008001a01010000000c004300fbffffffffff00000c0013005c22af17190000000800190003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000000400)={0x14, r2, 0xe01, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x60040055) r3 = socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00290cbd7000ffdbdf251c0000000800036e0316393f59cc50ffe76a97f7b400", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r0, r7}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:01 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 891.988440] Total swap = 0kB [ 892.002797] 1965979 pages RAM [ 892.016084] 0 pages HighMem/MovableOnly [ 892.091213] 339053 pages reserved [ 892.113061] 0 pages cma reserved [ 892.143272] Out of memory: Kill process 31474 (syz-executor.0) score 1009 or sacrifice child 07:51:01 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:02 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.current\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000329bd7000fbdbdf251300000008001a01010000000c004300fbffffffffff00000c0013005c22af17190000000800190003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000000400)={0x14, r2, 0xe01, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x60040055) r3 = socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00290cbd7000ffdbdf251c0000000800036e0316393f59cc50ffe76a97f7b400", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r0, r7}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:02 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 893.813275] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 894.046806] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 894.116587] CPU: 0 PID: 31514 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 894.124499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.134586] Call Trace: [ 894.137267] dump_stack+0x13e/0x194 [ 894.140897] dump_header+0x178/0x6d4 [ 894.144698] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 894.149982] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 894.155098] ? ___ratelimit+0x50/0x519 [ 894.159176] oom_kill_process.cold+0x10/0xae3 [ 894.163677] ? lock_downgrade+0x6e0/0x6e0 [ 894.167831] out_of_memory+0x2d5/0x1110 [ 894.171901] ? oom_killer_disable+0x1c0/0x1c0 [ 894.176565] ? mutex_trylock+0x152/0x1a0 [ 894.180643] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 894.186081] ? warn_alloc+0xf0/0xf0 [ 894.190254] __alloc_pages_nodemask+0x5d3/0x700 [ 894.195447] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 894.200458] ? lock_downgrade+0x6e0/0x6e0 [ 894.204874] alloc_pages_current+0xe7/0x1e0 [ 894.209716] __page_cache_alloc+0x245/0x3d0 [ 894.214212] filemap_fault+0xc18/0x1c50 [ 894.218357] ? __lock_page_or_retry+0x8a0/0x8a0 [ 894.223145] ? lock_acquire+0x170/0x3f0 [ 894.227569] ? ext4_filemap_fault+0x7c/0xb0 [ 894.232074] ext4_filemap_fault+0x84/0xb0 [ 894.236220] __do_fault+0xfa/0x380 [ 894.239764] __handle_mm_fault+0x22e9/0x3280 [ 894.244175] ? copy_page_range+0x1d70/0x1d70 [ 894.249638] ? find_held_lock+0x2d/0x110 [ 894.253711] handle_mm_fault+0x288/0x7a0 [ 894.258223] __get_user_pages+0x44d/0x11e0 [ 894.262642] ? follow_page_mask+0x1580/0x1580 [ 894.267829] ? perf_trace_lock+0x109/0x4b0 [ 894.272160] populate_vma_page_range+0x17b/0x210 [ 894.277531] __mm_populate+0x195/0x2c0 [ 894.283682] ? populate_vma_page_range+0x210/0x210 [ 894.288799] ? security_capable+0x88/0xb0 [ 894.293044] SyS_mlockall+0x3f5/0x520 [ 894.296845] ? SyS_munlock+0xf0/0xf0 [ 894.301685] do_syscall_64+0x1d5/0x640 [ 894.305582] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 894.310773] RIP: 0033:0x45ca29 [ 894.314048] RSP: 002b:00007f9c04015c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 894.321929] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 894.329726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 894.337524] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 894.345055] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 894.352497] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f9c040166d4 [ 896.308879] Mem-Info: [ 896.311404] active_anon:262775 inactive_anon:1063414 isolated_anon:0 [ 896.311404] active_file:18 inactive_file:0 isolated_file:0 [ 896.311404] unevictable:32081 dirty:0 writeback:0 unstable:0 [ 896.311404] slab_reclaimable:19646 slab_unreclaimable:107636 [ 896.311404] mapped:62097 shmem:4218 pagetables:14256 bounce:0 [ 896.311404] free:25030 free_pcp:1 free_cma:0 [ 896.602887] Node 0 active_anon:1040352kB inactive_anon:632100kB active_file:8kB inactive_file:112kB unevictable:110604kB isolated(anon):0kB isolated(file):0kB mapped:237428kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 896.782215] Node 1 active_anon:10748kB inactive_anon:3622556kB active_file:1140kB inactive_file:1108kB unevictable:11420kB isolated(anon):0kB isolated(file):128kB mapped:8460kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 896.846008] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.937188] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 896.942261] Node 0 DMA32 free:46324kB min:36272kB low:45340kB high:54408kB active_anon:1040264kB inactive_anon:641028kB active_file:1632kB inactive_file:4928kB unevictable:79304kB writepending:76kB present:3129332kB managed:2621260kB mlocked:79144kB kernel_stack:12832kB pagetables:24532kB bounce:0kB free_pcp:980kB local_pcp:336kB free_cma:0kB [ 897.057403] lowmem_reserve[]: 0 0 0 0 0 [ 897.080797] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 897.227539] lowmem_reserve[]: 0 0 0 0 0 [ 897.231587] Node 1 Normal free:64008kB min:53612kB low:67012kB high:80412kB active_anon:10660kB inactive_anon:3621652kB active_file:0kB inactive_file:12kB unevictable:6392kB writepending:0kB present:3932160kB managed:3870192kB mlocked:6392kB kernel_stack:8832kB pagetables:32228kB bounce:0kB free_pcp:1308kB local_pcp:652kB free_cma:0kB [ 897.358844] lowmem_reserve[]: 0 0 0 0 0 [ 897.362887] Node 0 DMA: 7*4kB (UME) 2*8kB (UE) 0*16kB 7*32kB (UME) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 897.411199] Node 0 DMA32: 2958*4kB (UME) 1179*8kB (ME) 497*16kB (UME) 192*32kB (UME) 134*64kB (UME) 64*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53920kB [ 897.455591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 897.468172] Node 1 Normal: 499*4kB (UME) 462*8kB (UME) 208*16kB (UME) 353*32kB (UME) 198*64kB (UME) 96*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 64988kB [ 897.490408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.503143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.516417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 897.528178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 897.536964] 11763 total pagecache pages [ 897.545415] 0 pages in swap cache [ 897.551249] Swap cache stats: add 0, delete 0, find 0/0 [ 897.556671] Free swap = 0kB [ 897.564105] Total swap = 0kB [ 897.569704] 1965979 pages RAM [ 897.572853] 0 pages HighMem/MovableOnly [ 897.576828] 339053 pages reserved [ 897.586257] 0 pages cma reserved [ 897.596923] Out of memory: Kill process 31512 (syz-executor.0) score 1009 or sacrifice child [ 897.626938] Killed process 31514 (syz-executor.0) total-vm:74972kB, anon-rss:18028kB, file-rss:52012kB, shmem-rss:0kB [ 897.683425] oom_reaper: reaped process 31514 (syz-executor.0), now anon-rss:18020kB, file-rss:17712kB, shmem-rss:0kB 07:51:06 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:06 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:07 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:07 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 898.382876] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 898.474365] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 898.528770] CPU: 1 PID: 31553 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 898.537358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.547235] Call Trace: [ 898.549836] dump_stack+0x13e/0x194 [ 898.553592] dump_header+0x178/0x6d4 [ 898.557861] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 898.562997] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 898.568286] ? ___ratelimit+0x50/0x519 [ 898.572272] oom_kill_process.cold+0x10/0xae3 [ 898.576772] ? lock_downgrade+0x6e0/0x6e0 [ 898.581187] out_of_memory+0x2d5/0x1110 [ 898.585178] ? oom_killer_disable+0x1c0/0x1c0 [ 898.589693] ? mutex_trylock+0x152/0x1a0 [ 898.593763] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 898.598635] ? warn_alloc+0xf0/0xf0 [ 898.602425] __alloc_pages_nodemask+0x5d3/0x700 [ 898.607203] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 898.614228] ? save_trace+0x290/0x290 [ 898.618072] alloc_pages_vma+0xc2/0x4a0 [ 898.622666] __handle_mm_fault+0x17b6/0x3280 [ 898.627266] ? copy_page_range+0x1d70/0x1d70 [ 898.631683] ? find_held_lock+0x2d/0x110 [ 898.635766] handle_mm_fault+0x288/0x7a0 [ 898.639834] __get_user_pages+0x44d/0x11e0 [ 898.644086] ? follow_page_mask+0x1580/0x1580 [ 898.648580] ? perf_trace_lock+0x109/0x4b0 [ 898.653826] ? lock_acquire+0x170/0x3f0 [ 898.657795] ? __mm_populate+0x1e3/0x2c0 [ 898.661951] populate_vma_page_range+0x17b/0x210 [ 898.666708] __mm_populate+0x195/0x2c0 [ 898.670599] ? populate_vma_page_range+0x210/0x210 [ 898.675522] ? security_capable+0x88/0xb0 [ 898.679668] SyS_mlockall+0x3f5/0x520 [ 898.683597] ? SyS_munlock+0xf0/0xf0 [ 898.687396] do_syscall_64+0x1d5/0x640 [ 898.691374] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 898.696668] RIP: 0033:0x45ca29 [ 898.699848] RSP: 002b:00007fa0858c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 898.707549] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 898.715157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 898.723121] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 898.730389] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 898.737656] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fa0858ca6d4 [ 899.043624] Mem-Info: [ 899.046089] active_anon:262740 inactive_anon:1063414 isolated_anon:0 [ 899.046089] active_file:29 inactive_file:2 isolated_file:0 [ 899.046089] unevictable:32481 dirty:0 writeback:0 unstable:0 [ 899.046089] slab_reclaimable:19650 slab_unreclaimable:107515 [ 899.046089] mapped:59213 shmem:4218 pagetables:14255 bounce:0 [ 899.046089] free:24851 free_pcp:48 free_cma:0 [ 899.084114] Node 0 active_anon:1040360kB inactive_anon:632100kB active_file:72kB inactive_file:44kB unevictable:110820kB isolated(anon):0kB isolated(file):0kB mapped:235824kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 899.116198] Node 1 active_anon:10600kB inactive_anon:3621556kB active_file:8kB inactive_file:0kB unevictable:19104kB isolated(anon):0kB isolated(file):0kB mapped:1028kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 899.145320] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.196270] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 899.205270] Node 0 DMA32 free:35700kB min:36272kB low:45340kB high:54408kB active_anon:1040348kB inactive_anon:627028kB active_file:60kB inactive_file:68kB unevictable:110872kB writepending:0kB present:3129332kB managed:2621260kB mlocked:110872kB kernel_stack:13024kB pagetables:24832kB bounce:0kB free_pcp:192kB local_pcp:120kB free_cma:0kB [ 899.251605] lowmem_reserve[]: 0 0 0 0 0 [ 899.256703] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.298518] lowmem_reserve[]: 0 0 0 0 0 [ 899.302552] Node 1 Normal free:53128kB min:53612kB low:67012kB high:80412kB active_anon:10600kB inactive_anon:3621556kB active_file:4kB inactive_file:4kB unevictable:19104kB writepending:0kB present:3932160kB managed:3870192kB mlocked:19104kB kernel_stack:8832kB pagetables:32144kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.340897] lowmem_reserve[]: 0 0 0 0 0 [ 899.345017] Node 0 DMA: 7*4kB (UME) 2*8kB (UE) 0*16kB 7*32kB (UME) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 899.367184] Node 0 DMA32: 1135*4kB (UME) 317*8kB (UE) 239*16kB (UME) 193*32kB (UME) 135*64kB (UME) 64*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35700kB [ 899.386816] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 899.405479] Node 1 Normal: 120*4kB (UME) 119*8kB (UME) 19*16kB (UME) 260*32kB (UME) 173*64kB (UME) 96*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53128kB [ 899.429255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.438447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 899.454586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.463813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 899.482279] 9693 total pagecache pages [ 899.486368] 0 pages in swap cache [ 899.493471] Swap cache stats: add 0, delete 0, find 0/0 [ 899.504274] Free swap = 0kB [ 899.516808] Total swap = 0kB [ 899.528156] 1965979 pages RAM [ 899.531455] 0 pages HighMem/MovableOnly [ 899.536194] 339053 pages reserved [ 899.558018] 0 pages cma reserved [ 899.561599] Out of memory: Kill process 31546 (syz-executor.5) score 1007 or sacrifice child [ 899.576811] Killed process 31546 (syz-executor.5) total-vm:74840kB, anon-rss:16804kB, file-rss:39212kB, shmem-rss:0kB [ 899.623764] oom_reaper: reaped process 31546 (syz-executor.5), now anon-rss:17088kB, file-rss:5364kB, shmem-rss:0kB [ 899.665432] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 899.713316] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 899.728930] CPU: 1 PID: 6332 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 899.737101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.746638] Call Trace: [ 899.749404] dump_stack+0x13e/0x194 [ 899.753037] dump_header+0x178/0x6d4 [ 899.756937] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 899.761958] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 899.767067] ? ___ratelimit+0x50/0x519 [ 899.771025] oom_kill_process.cold+0x10/0xae3 [ 899.775527] ? lock_downgrade+0x6e0/0x6e0 [ 899.780214] out_of_memory+0x2d5/0x1110 [ 899.784197] ? oom_killer_disable+0x1c0/0x1c0 [ 899.788700] ? mutex_trylock+0x152/0x1a0 [ 899.792872] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 899.797732] ? warn_alloc+0xf0/0xf0 [ 899.801368] __alloc_pages_nodemask+0x5d3/0x700 [ 899.806051] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 899.811082] ? lock_downgrade+0x6e0/0x6e0 [ 899.815366] alloc_pages_current+0xe7/0x1e0 [ 899.819696] __page_cache_alloc+0x245/0x3d0 [ 899.824130] filemap_fault+0xc18/0x1c50 [ 899.828116] ? __lock_page_or_retry+0x8a0/0x8a0 [ 899.832970] ? lock_acquire+0x170/0x3f0 [ 899.837033] ? ext4_filemap_fault+0x7c/0xb0 [ 899.841366] ext4_filemap_fault+0x84/0xb0 [ 899.845517] __do_fault+0xfa/0x380 [ 899.849059] __handle_mm_fault+0x22e9/0x3280 [ 899.858250] ? copy_page_range+0x1d70/0x1d70 [ 899.862747] ? find_held_lock+0x2d/0x110 [ 899.867192] handle_mm_fault+0x288/0x7a0 [ 899.871339] __do_page_fault+0x4bc/0xb40 [ 899.875399] ? vmalloc_fault+0xdf0/0xdf0 [ 899.879460] ? do_page_fault+0x60/0x4f2 [ 899.884413] ? page_fault+0x2f/0x50 [ 899.888057] page_fault+0x45/0x50 [ 899.891511] RIP: 0001:0xc43573dc80 [ 899.895092] RSP: 3a1be2c7:000000c4200396e8 EFLAGS: d189a0ac73 [ 899.959787] Mem-Info: [ 899.969566] active_anon:262740 inactive_anon:1063416 isolated_anon:0 [ 899.969566] active_file:30 inactive_file:48 isolated_file:0 [ 899.969566] unevictable:32171 dirty:0 writeback:0 unstable:0 [ 899.969566] slab_reclaimable:19650 slab_unreclaimable:107517 [ 899.969566] mapped:58938 shmem:4218 pagetables:14292 bounce:0 [ 899.969566] free:24971 free_pcp:29 free_cma:0 [ 900.005878] Node 0 active_anon:1040348kB inactive_anon:632100kB active_file:108kB inactive_file:64kB unevictable:110204kB isolated(anon):0kB isolated(file):0kB mapped:232184kB dirty:8kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 900.036278] Node 1 active_anon:10616kB inactive_anon:3621620kB active_file:4kB inactive_file:8kB unevictable:18568kB isolated(anon):0kB isolated(file):0kB mapped:3604kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 900.065501] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.117354] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 900.136069] Node 0 DMA32 free:35780kB min:36272kB low:45340kB high:54408kB active_anon:1040336kB inactive_anon:627028kB active_file:36kB inactive_file:104kB unevictable:110300kB writepending:16kB present:3129332kB managed:2621260kB mlocked:110300kB kernel_stack:12960kB pagetables:24740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.348177] lowmem_reserve[]: 0 0 0 0 0 [ 900.368463] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.524178] lowmem_reserve[]: 0 0 0 0 0 [ 900.552125] Node 1 Normal free:53236kB min:53612kB low:67012kB high:80412kB active_anon:10616kB inactive_anon:3621620kB active_file:4kB inactive_file:0kB unevictable:18568kB writepending:12kB present:3932160kB managed:3870192kB mlocked:18568kB kernel_stack:8896kB pagetables:32276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 900.722292] lowmem_reserve[]: 0 0 0 0 0 [ 900.751515] Node 0 DMA: 7*4kB (UME) 2*8kB (UE) 0*16kB 7*32kB (UME) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 900.844839] Node 0 DMA32: 1169*4kB (UME) 319*8kB (UME) 255*16kB (UME) 200*32kB (UME) 135*64kB (UME) 64*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36332kB [ 900.940089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 901.040366] Node 1 Normal: 90*4kB (UME) 126*8kB (UME) 20*16kB (UME) 267*32kB (UME) 177*64kB (UME) 96*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53560kB [ 901.105086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.147042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 901.155630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 901.294223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:51:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fbdbdf251300000008001a01010000000c004300fbffffffffff00000c0013005c22af17190000000800190003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000000400)={0x14, 0x0, 0xe01, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x60040055) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = dup(0xffffffffffffffff) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r3}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpid() perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x6, 0x0, 0x3, 0x64, 0x0, 0x80000001, 0x82800, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffdc, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x3080, 0x0, 0x0, 0x0, 0x1, 0x3}, r6, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="30072abd7000fedbdf253100000008000300", @ANYRES32=r3, @ANYBLOB='\x00', @ANYRES32=r5, @ANYBLOB='\b\x00R\x00', @ANYRES32=r6, @ANYBLOB="0c009900020000000200000008000100000000000800010001000000"], 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x2400c895) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r0, r7}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:10 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:10 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 901.349197] 9416 total pagecache pages [ 901.353294] 0 pages in swap cache [ 901.368628] Swap cache stats: add 0, delete 0, find 0/0 [ 901.375428] Free swap = 0kB 07:51:10 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 901.424797] Total swap = 0kB [ 901.454167] 1965979 pages RAM [ 901.466628] 0 pages HighMem/MovableOnly [ 901.496969] 339053 pages reserved [ 901.524918] 0 pages cma reserved [ 901.552331] Out of memory: Kill process 31547 (syz-executor.1) score 1007 or sacrifice child [ 902.858995] syz-executor.3 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 902.984760] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 902.990520] CPU: 1 PID: 31566 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 902.998417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.007774] Call Trace: [ 903.010369] dump_stack+0x13e/0x194 [ 903.014007] dump_header+0x178/0x6d4 [ 903.017728] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 903.022839] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 903.028127] ? ___ratelimit+0x50/0x519 [ 903.032029] oom_kill_process.cold+0x10/0xae3 [ 903.036547] ? lock_acquire+0x170/0x3f0 [ 903.040536] ? lock_downgrade+0x6e0/0x6e0 [ 903.044720] out_of_memory+0x2d5/0x1110 [ 903.048725] ? oom_killer_disable+0x1c0/0x1c0 [ 903.053236] ? mutex_trylock+0x152/0x1a0 [ 903.057684] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 903.062551] ? warn_alloc+0xf0/0xf0 [ 903.068071] __alloc_pages_nodemask+0x5d3/0x700 [ 903.072784] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 903.077808] ? check_preemption_disabled+0x35/0x240 [ 903.082838] ? __unlock_page_memcg+0x4f/0x100 [ 903.087357] alloc_pages_vma+0xc2/0x4a0 [ 903.091344] wp_page_copy+0x1f1/0x1300 [ 903.095240] ? follow_pfn+0x200/0x200 [ 903.099054] do_wp_page+0x244/0x11d0 [ 903.102774] ? finish_mkwrite_fault+0x640/0x640 [ 903.107455] __handle_mm_fault+0x1c0e/0x3280 [ 903.111964] ? copy_page_range+0x1d70/0x1d70 [ 903.117775] ? find_held_lock+0x2d/0x110 [ 903.121863] handle_mm_fault+0x288/0x7a0 [ 903.126106] __do_page_fault+0x4bc/0xb40 [ 903.130269] ? vmalloc_fault+0xdf0/0xdf0 [ 903.134337] ? do_page_fault+0x60/0x4f2 [ 903.138491] ? page_fault+0x2f/0x50 [ 903.142128] page_fault+0x45/0x50 [ 903.145580] RIP: 80000000:0x7fb9c3510008 [ 903.149654] RSP: 2d63d276:0000000000000000 EFLAGS: 0078c0c8 [ 903.219515] Mem-Info: [ 903.311114] active_anon:263964 inactive_anon:1063423 isolated_anon:0 [ 903.311114] active_file:27 inactive_file:0 isolated_file:0 [ 903.311114] unevictable:30555 dirty:0 writeback:0 unstable:0 [ 903.311114] slab_reclaimable:19570 slab_unreclaimable:107835 [ 903.311114] mapped:58280 shmem:4218 pagetables:14358 bounce:0 [ 903.311114] free:25020 free_pcp:2 free_cma:0 [ 903.648863] Node 0 active_anon:1045092kB inactive_anon:632128kB active_file:68kB inactive_file:0kB unevictable:105500kB isolated(anon):0kB isolated(file):0kB mapped:233120kB dirty:0kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 903.784553] Node 1 active_anon:10764kB inactive_anon:3621564kB active_file:0kB inactive_file:8kB unevictable:16724kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 903.814771] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 903.841685] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 903.846793] Node 0 DMA32 free:36272kB min:36272kB low:45340kB high:54408kB active_anon:1045080kB inactive_anon:627056kB active_file:16kB inactive_file:116kB unevictable:105288kB writepending:0kB present:3129332kB managed:2621260kB mlocked:105288kB kernel_stack:13440kB pagetables:25232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 903.877270] lowmem_reserve[]: 0 0 0 0 0 [ 903.881282] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 903.988773] lowmem_reserve[]: 0 0 0 0 0 [ 903.992847] Node 1 Normal free:53516kB min:53612kB low:67012kB high:80412kB active_anon:10764kB inactive_anon:3621564kB active_file:4kB inactive_file:4kB unevictable:16728kB writepending:0kB present:3932160kB managed:3870192kB mlocked:16728kB kernel_stack:8768kB pagetables:32160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 904.152450] lowmem_reserve[]: 0 0 0 0 0 [ 904.156550] Node 0 DMA: 7*4kB (UME) 2*8kB (UE) 0*16kB 7*32kB (UME) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 904.172444] Node 0 DMA32: 1029*4kB (UE) 493*8kB (UME) 198*16kB (UME) 174*32kB (UME) 139*64kB (UME) 64*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35676kB [ 904.188291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 904.199203] Node 1 Normal: 132*4kB (UME) 33*8kB (UME) 19*16kB (UME) 232*32kB (UME) 201*64kB (UME) 98*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53640kB [ 904.216030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 904.225154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 904.233818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 904.249943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 904.302618] 8731 total pagecache pages [ 904.314397] 0 pages in swap cache [ 904.344475] Swap cache stats: add 0, delete 0, find 0/0 [ 904.404639] Free swap = 0kB [ 904.454370] Total swap = 0kB [ 904.473180] 1965979 pages RAM [ 904.476308] 0 pages HighMem/MovableOnly [ 904.525655] 339053 pages reserved [ 904.574789] 0 pages cma reserved [ 904.581617] Out of memory: Kill process 31566 (syz-executor.3) score 1007 or sacrifice child [ 904.661405] Killed process 31566 (syz-executor.3) total-vm:75104kB, anon-rss:17832kB, file-rss:39272kB, shmem-rss:0kB [ 904.760288] oom_reaper: reaped process 31566 (syz-executor.3), now anon-rss:18020kB, file-rss:5616kB, shmem-rss:0kB 07:51:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:14 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:14 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 905.137993] syz-executor.5 (31570) used greatest stack depth: 23008 bytes left 07:51:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:14 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:14 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:14 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 906.588849] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 906.735004] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 906.780253] CPU: 1 PID: 6333 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 906.787733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.797090] Call Trace: [ 906.799738] dump_stack+0x13e/0x194 [ 906.803376] dump_header+0x178/0x6d4 [ 906.807179] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 906.812293] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 906.817393] ? ___ratelimit+0x50/0x519 [ 906.821286] oom_kill_process.cold+0x10/0xae3 [ 906.825791] ? lock_acquire+0x170/0x3f0 [ 906.829770] ? lock_downgrade+0x6e0/0x6e0 [ 906.834009] out_of_memory+0x2d5/0x1110 [ 906.837996] ? oom_killer_disable+0x1c0/0x1c0 [ 906.842499] ? mutex_trylock+0x152/0x1a0 [ 906.846655] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 906.851523] ? warn_alloc+0xf0/0xf0 [ 906.855175] __alloc_pages_nodemask+0x5d3/0x700 [ 906.859841] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 906.864857] ? lock_downgrade+0x6e0/0x6e0 [ 906.869639] alloc_pages_current+0xe7/0x1e0 [ 906.874059] __page_cache_alloc+0x245/0x3d0 [ 906.878392] filemap_fault+0xc18/0x1c50 [ 906.882378] ? __lock_page_or_retry+0x8a0/0x8a0 [ 906.887057] ? lock_acquire+0x170/0x3f0 [ 906.891116] ? ext4_filemap_fault+0x7c/0xb0 [ 906.895452] ext4_filemap_fault+0x84/0xb0 [ 906.899609] __do_fault+0xfa/0x380 [ 906.903160] __handle_mm_fault+0x22e9/0x3280 [ 906.907572] ? copy_page_range+0x1d70/0x1d70 [ 906.912069] ? find_held_lock+0x2d/0x110 [ 906.916153] handle_mm_fault+0x288/0x7a0 [ 906.920740] __do_page_fault+0x4bc/0xb40 [ 906.924820] ? vmalloc_fault+0xdf0/0xdf0 [ 906.928878] ? do_page_fault+0x60/0x4f2 [ 906.933115] ? page_fault+0x2f/0x50 [ 906.936739] page_fault+0x45/0x50 [ 906.940185] RIP: 00f1:0x11 [ 906.943020] RSP: 0005:000000c42004ff18 EFLAGS: 0042f0a0 [ 907.390206] Mem-Info: [ 907.413380] active_anon:263842 inactive_anon:1063417 isolated_anon:0 [ 907.413380] active_file:21 inactive_file:11 isolated_file:0 [ 907.413380] unevictable:30522 dirty:0 writeback:0 unstable:0 [ 907.413380] slab_reclaimable:19532 slab_unreclaimable:108099 [ 907.413380] mapped:59989 shmem:4219 pagetables:14388 bounce:0 [ 907.413380] free:24930 free_pcp:0 free_cma:0 [ 907.521659] Node 0 active_anon:1043972kB inactive_anon:632108kB active_file:124kB inactive_file:0kB unevictable:106036kB isolated(anon):0kB isolated(file):0kB mapped:237712kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 907.574668] Node 1 active_anon:11396kB inactive_anon:3621560kB active_file:0kB inactive_file:16kB unevictable:16128kB isolated(anon):0kB isolated(file):0kB mapped:2300kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 907.815231] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 908.058326] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 908.114299] Node 0 DMA32 free:35708kB min:36272kB low:45340kB high:54408kB active_anon:1043960kB inactive_anon:627036kB active_file:144kB inactive_file:0kB unevictable:106128kB writepending:0kB present:3129332kB managed:2621260kB mlocked:106128kB kernel_stack:13280kB pagetables:25312kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 908.150017] lowmem_reserve[]: 0 0 0 0 0 [ 908.212223] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:51:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 908.349034] lowmem_reserve[]: 0 0 0 0 0 [ 908.353498] Node 1 Normal free:54980kB min:53612kB low:67012kB high:80412kB active_anon:11392kB inactive_anon:3627960kB active_file:504kB inactive_file:1032kB unevictable:6012kB writepending:4kB present:3932160kB managed:3870192kB mlocked:6100kB kernel_stack:8800kB pagetables:32108kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB 07:51:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) socket$pptp(0x18, 0x1, 0x2) 07:51:17 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 908.596716] lowmem_reserve[]: 0 0 0 0 0 [ 908.647531] Node 0 DMA: 7*4kB (UME) 2*8kB (UE) 0*16kB 7*32kB (UME) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 908.770264] Node 0 DMA32: 1008*4kB (UME) 881*8kB (UME) 472*16kB (UME) 165*32kB (UME) 143*64kB (UME) 64*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43048kB [ 908.906731] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 07:51:18 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:18 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:18 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 909.016542] Node 1 Normal: 393*4kB (UME) 644*8kB (UME) 285*16kB (UME) 374*32kB (UME) 209*64kB (UME) 99*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 69012kB [ 909.180744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.263420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.344873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.423787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.506273] 11366 total pagecache pages [ 909.547842] 0 pages in swap cache [ 909.551337] Swap cache stats: add 0, delete 0, find 0/0 [ 909.596490] Free swap = 0kB [ 909.599936] Total swap = 0kB [ 909.602960] 1965979 pages RAM [ 909.614025] 0 pages HighMem/MovableOnly [ 909.618312] 339053 pages reserved [ 909.621772] 0 pages cma reserved [ 909.625648] Out of memory: Kill process 31622 (syz-executor.5) score 1008 or sacrifice child [ 909.990279] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 910.073571] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 910.093651] CPU: 0 PID: 6353 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 910.103035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.112826] Call Trace: [ 910.115513] dump_stack+0x13e/0x194 [ 910.119411] dump_header+0x178/0x6d4 [ 910.123231] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 910.128426] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 910.133725] ? ___ratelimit+0x50/0x519 [ 910.137662] oom_kill_process.cold+0x10/0xae3 [ 910.142166] ? lock_acquire+0x170/0x3f0 [ 910.146138] ? lock_downgrade+0x6e0/0x6e0 [ 910.150902] out_of_memory+0x2d5/0x1110 [ 910.154991] ? oom_killer_disable+0x1c0/0x1c0 [ 910.159486] ? mutex_trylock+0x152/0x1a0 [ 910.163551] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 910.168413] ? warn_alloc+0xf0/0xf0 [ 910.172053] __alloc_pages_nodemask+0x5d3/0x700 [ 910.176728] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 910.181917] ? lock_downgrade+0x6e0/0x6e0 [ 910.186070] alloc_pages_current+0xe7/0x1e0 [ 910.190393] __page_cache_alloc+0x245/0x3d0 [ 910.194714] filemap_fault+0xc18/0x1c50 [ 910.200714] ? __lock_page_or_retry+0x8a0/0x8a0 [ 910.205413] ? lock_acquire+0x170/0x3f0 [ 910.209476] ? ext4_filemap_fault+0x7c/0xb0 [ 910.213804] ext4_filemap_fault+0x84/0xb0 [ 910.217995] __do_fault+0xfa/0x380 [ 910.221558] __handle_mm_fault+0x22e9/0x3280 [ 910.226234] ? copy_page_range+0x1d70/0x1d70 [ 910.230911] ? find_held_lock+0x2d/0x110 [ 910.235639] handle_mm_fault+0x288/0x7a0 [ 910.239705] __do_page_fault+0x4bc/0xb40 [ 910.243775] ? vmalloc_fault+0xdf0/0xdf0 [ 910.247928] ? do_page_fault+0x60/0x4f2 [ 910.252856] ? page_fault+0x2f/0x50 [ 910.256483] page_fault+0x45/0x50 [ 910.260106] RIP: 0040:0x57 [ 910.262975] RSP: 000f:000000c434f59510 EFLAGS: 00000040 [ 910.286692] Mem-Info: [ 910.295091] active_anon:262741 inactive_anon:1063414 isolated_anon:0 [ 910.295091] active_file:28 inactive_file:104 isolated_file:0 [ 910.295091] unevictable:31484 dirty:0 writeback:0 unstable:0 [ 910.295091] slab_reclaimable:19502 slab_unreclaimable:108348 [ 910.295091] mapped:59849 shmem:4218 pagetables:14227 bounce:0 [ 910.295091] free:24955 free_pcp:38 free_cma:0 [ 910.350114] Node 0 active_anon:1040288kB inactive_anon:632096kB active_file:84kB inactive_file:116kB unevictable:108688kB isolated(anon):0kB isolated(file):0kB mapped:237020kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 910.379511] Node 1 active_anon:10676kB inactive_anon:3621560kB active_file:0kB inactive_file:56kB unevictable:18048kB isolated(anon):0kB isolated(file):0kB mapped:2500kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 910.416994] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.445060] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 910.450220] Node 0 DMA32 free:35960kB min:36272kB low:45340kB high:54408kB active_anon:1040276kB inactive_anon:627024kB active_file:48kB inactive_file:348kB unevictable:110100kB writepending:0kB present:3129332kB managed:2621260kB mlocked:110100kB kernel_stack:13120kB pagetables:24824kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 910.547590] lowmem_reserve[]: 0 0 0 0 0 [ 910.551645] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.746209] lowmem_reserve[]: 0 0 0 0 0 [ 910.774028] Node 1 Normal free:53100kB min:53612kB low:67012kB high:80412kB active_anon:10676kB inactive_anon:3621560kB active_file:0kB inactive_file:56kB unevictable:17748kB writepending:0kB present:3932160kB managed:3870192kB mlocked:17748kB kernel_stack:8768kB pagetables:32040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.930629] lowmem_reserve[]: 0 0 0 0 0 [ 910.971120] Node 0 DMA: 6*4kB (UE) 4*8kB (UME) 0*16kB 6*32kB (UE) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 911.001183] Node 0 DMA32: 1260*4kB (UME) 537*8kB (UME) 233*16kB (UME) 129*32kB (UME) 141*64kB (UME) 64*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36200kB [ 911.022391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 911.054579] Node 1 Normal: 141*4kB (UE) 65*8kB (UE) 54*16kB (UE) 230*32kB (UE) 182*64kB (UME) 99*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53340kB [ 911.173321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.210973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 911.219719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 911.231005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 911.239733] 10298 total pagecache pages [ 911.243706] 0 pages in swap cache [ 911.247609] Swap cache stats: add 0, delete 0, find 0/0 [ 911.252961] Free swap = 0kB [ 911.255958] Total swap = 0kB [ 911.259001] 1965979 pages RAM [ 911.262089] 0 pages HighMem/MovableOnly [ 911.266038] 339053 pages reserved [ 911.269552] 0 pages cma reserved [ 911.273809] Out of memory: Kill process 31648 (syz-executor.5) score 1008 or sacrifice child [ 911.282454] Killed process 31648 (syz-executor.5) total-vm:74972kB, anon-rss:17980kB, file-rss:42600kB, shmem-rss:0kB [ 911.358393] oom_reaper: reaped process 31648 (syz-executor.5), now anon-rss:18024kB, file-rss:8744kB, shmem-rss:0kB [ 911.402495] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 911.503515] systemd-udevd cpuset=/ mems_allowed=0-1 [ 911.534328] CPU: 0 PID: 3637 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 911.542071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.551516] Call Trace: [ 911.554107] dump_stack+0x13e/0x194 [ 911.557741] dump_header+0x178/0x6d4 [ 911.561459] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 911.566565] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 911.571668] ? ___ratelimit+0x50/0x519 [ 911.575737] oom_kill_process.cold+0x10/0xae3 [ 911.580252] ? lock_downgrade+0x6e0/0x6e0 [ 911.584417] out_of_memory+0x2d5/0x1110 [ 911.588575] ? oom_killer_disable+0x1c0/0x1c0 [ 911.593727] ? mutex_trylock+0x152/0x1a0 [ 911.598494] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 911.603447] ? warn_alloc+0xf0/0xf0 [ 911.607366] __alloc_pages_nodemask+0x5d3/0x700 [ 911.612141] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 911.617518] ? lock_downgrade+0x6e0/0x6e0 [ 911.622634] alloc_pages_current+0xe7/0x1e0 [ 911.626968] __page_cache_alloc+0x245/0x3d0 [ 911.631381] filemap_fault+0xc18/0x1c50 [ 911.635371] ? __lock_page_or_retry+0x8a0/0x8a0 [ 911.640048] ? lock_acquire+0x170/0x3f0 [ 911.644024] ? ext4_filemap_fault+0x7c/0xb0 [ 911.648447] ext4_filemap_fault+0x84/0xb0 [ 911.652771] __do_fault+0xfa/0x380 [ 911.656356] __handle_mm_fault+0x22e9/0x3280 [ 911.660767] ? copy_page_range+0x1d70/0x1d70 [ 911.665266] ? find_held_lock+0x2d/0x110 [ 911.669341] handle_mm_fault+0x288/0x7a0 [ 911.673402] __do_page_fault+0x4bc/0xb40 [ 911.677463] ? vmalloc_fault+0xdf0/0xdf0 07:51:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) socket$pptp(0x18, 0x1, 0x2) 07:51:20 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 911.681627] ? do_page_fault+0x60/0x4f2 [ 911.685602] ? page_fault+0x2f/0x50 [ 911.689225] page_fault+0x45/0x50 [ 911.692765] RIP: 0001:0x561d10a80ce0 [ 911.696477] RSP: 5758fa62:0000561d10a6d5d0 EFLAGS: 561d10899002 [ 911.950091] Mem-Info: [ 911.959894] active_anon:262766 inactive_anon:1063438 isolated_anon:0 [ 911.959894] active_file:136 inactive_file:152 isolated_file:32 [ 911.959894] unevictable:30926 dirty:25 writeback:0 unstable:0 [ 911.959894] slab_reclaimable:19535 slab_unreclaimable:107913 [ 911.959894] mapped:59220 shmem:4218 pagetables:14229 bounce:0 [ 911.959894] free:25094 free_pcp:280 free_cma:0 [ 912.004876] Node 0 active_anon:1040480kB inactive_anon:632240kB active_file:180kB inactive_file:644kB unevictable:106904kB isolated(anon):0kB isolated(file):0kB mapped:233436kB dirty:4kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 912.042183] Node 1 active_anon:10696kB inactive_anon:3621564kB active_file:4kB inactive_file:4kB unevictable:16944kB isolated(anon):0kB isolated(file):0kB mapped:2712kB dirty:4kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 912.122734] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.152521] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 912.159216] Node 0 DMA32 free:36644kB min:36272kB low:45340kB high:54408kB active_anon:1040468kB inactive_anon:627168kB active_file:48kB inactive_file:812kB unevictable:107380kB writepending:4kB present:3129332kB managed:2621260kB mlocked:107380kB kernel_stack:13408kB pagetables:25192kB bounce:0kB free_pcp:972kB local_pcp:328kB free_cma:0kB [ 912.192459] lowmem_reserve[]: 0 0 0 0 0 [ 912.197830] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.261922] lowmem_reserve[]: 0 0 0 0 0 [ 912.266116] Node 1 Normal free:53428kB min:53612kB low:67012kB high:80412kB active_anon:10696kB inactive_anon:3621564kB active_file:4kB inactive_file:4kB unevictable:16944kB writepending:4kB present:3932160kB managed:3870192kB mlocked:16944kB kernel_stack:8768kB pagetables:32188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.297122] lowmem_reserve[]: 0 0 0 0 0 [ 912.305863] Node 0 DMA: 6*4kB (UE) 4*8kB (UME) 0*16kB 6*32kB (UE) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 912.321495] Node 0 DMA32: 1046*4kB (UME) 700*8kB (UME) 220*16kB (UME) 131*32kB (UME) 134*64kB (UME) 64*128kB (UME) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36056kB [ 912.337952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 912.349450] Node 1 Normal: 129*4kB (UME) 37*8kB (UME) 68*16kB (UME) 244*32kB (UME) 182*64kB (UME) 99*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53740kB [ 912.597192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.606072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 912.816089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.835304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 912.895574] 10104 total pagecache pages [ 912.899641] 0 pages in swap cache [ 912.903095] Swap cache stats: add 0, delete 0, find 0/0 [ 912.924800] Free swap = 0kB [ 912.932328] Total swap = 0kB [ 912.935369] 1965979 pages RAM [ 912.939100] 0 pages HighMem/MovableOnly [ 912.943081] 339053 pages reserved [ 912.967937] 0 pages cma reserved [ 912.983957] Out of memory: Kill process 31653 (syz-executor.1) score 1007 or sacrifice child 07:51:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) socket$pptp(0x18, 0x1, 0x2) 07:51:22 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:22 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:22 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 914.145995] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 914.242705] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 914.275950] CPU: 1 PID: 6337 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 914.283430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.293170] Call Trace: [ 914.296282] dump_stack+0x13e/0x194 [ 914.300005] dump_header+0x178/0x6d4 [ 914.303722] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 914.308740] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 914.314111] ? ___ratelimit+0x50/0x519 [ 914.318123] oom_kill_process.cold+0x10/0xae3 [ 914.322633] ? lock_downgrade+0x6e0/0x6e0 [ 914.326893] out_of_memory+0x2d5/0x1110 [ 914.330875] ? oom_killer_disable+0x1c0/0x1c0 [ 914.336509] ? mutex_trylock+0x152/0x1a0 [ 914.340580] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 914.346089] ? warn_alloc+0xf0/0xf0 [ 914.349738] __alloc_pages_nodemask+0x5d3/0x700 [ 914.355544] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 914.360862] ? lock_downgrade+0x6e0/0x6e0 [ 914.365026] alloc_pages_current+0xe7/0x1e0 [ 914.369362] __page_cache_alloc+0x245/0x3d0 [ 914.373779] filemap_fault+0xc18/0x1c50 [ 914.378291] ? __lock_page_or_retry+0x8a0/0x8a0 [ 914.382971] ? lock_acquire+0x170/0x3f0 [ 914.387042] ? ext4_filemap_fault+0x7c/0xb0 [ 914.391462] ext4_filemap_fault+0x84/0xb0 [ 914.396397] __do_fault+0xfa/0x380 [ 914.400461] __handle_mm_fault+0x22e9/0x3280 [ 914.404872] ? copy_page_range+0x1d70/0x1d70 [ 914.409370] ? find_held_lock+0x2d/0x110 [ 914.414060] handle_mm_fault+0x288/0x7a0 [ 914.418748] __do_page_fault+0x4bc/0xb40 [ 914.422818] ? vmalloc_fault+0xdf0/0xdf0 [ 914.427260] ? do_page_fault+0x60/0x4f2 [ 914.431265] ? page_fault+0x2f/0x50 [ 914.434901] page_fault+0x45/0x50 [ 914.438625] RIP: 0005:0x14e [ 914.441552] RSP: 0000:000000c420039758 EFLAGS: e246b9faee [ 914.634520] Mem-Info: [ 914.645058] active_anon:263288 inactive_anon:1063414 isolated_anon:0 [ 914.645058] active_file:36 inactive_file:7 isolated_file:4 [ 914.645058] unevictable:31670 dirty:9 writeback:0 unstable:0 [ 914.645058] slab_reclaimable:19503 slab_unreclaimable:107730 [ 914.645058] mapped:61164 shmem:4218 pagetables:14253 bounce:0 [ 914.645058] free:24871 free_pcp:0 free_cma:0 [ 914.679431] Node 0 active_anon:1042416kB inactive_anon:632088kB active_file:128kB inactive_file:56kB unevictable:109384kB isolated(anon):0kB isolated(file):0kB mapped:238368kB dirty:36kB writeback:0kB shmem:16860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 914.708341] Node 1 active_anon:10736kB inactive_anon:3621568kB active_file:0kB inactive_file:32kB unevictable:17332kB isolated(anon):0kB isolated(file):0kB mapped:6316kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 914.738073] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.806553] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 914.829404] Node 0 DMA32 free:36088kB min:36272kB low:45340kB high:54408kB active_anon:1042404kB inactive_anon:627016kB active_file:28kB inactive_file:24kB unevictable:109168kB writepending:0kB present:3129332kB managed:2621260kB mlocked:109132kB kernel_stack:13088kB pagetables:24908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.916516] lowmem_reserve[]: 0 0 0 0 0 [ 914.920947] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.967028] lowmem_reserve[]: 0 0 0 0 0 [ 914.972324] Node 1 Normal free:53352kB min:53612kB low:67012kB high:80412kB active_anon:10732kB inactive_anon:3621568kB active_file:4kB inactive_file:0kB unevictable:17336kB writepending:0kB present:3932160kB managed:3870192kB mlocked:17336kB kernel_stack:8864kB pagetables:32060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.018303] lowmem_reserve[]: 0 0 0 0 0 [ 915.022554] Node 0 DMA: 6*4kB (UE) 4*8kB (UME) 0*16kB 6*32kB (UE) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 915.049051] Node 0 DMA32: 2801*4kB (UME) 1526*8kB (UME) 142*16kB (UME) 140*32kB (UME) 135*64kB (UME) 63*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 50964kB [ 915.067652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 915.078941] Node 1 Normal: 167*4kB (UME) 98*8kB (UME) 65*16kB (UME) 240*32kB (UME) 190*64kB (UME) 99*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 54716kB [ 915.095855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.105696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.114379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.150505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.233332] 12350 total pagecache pages [ 915.272762] 0 pages in swap cache [ 915.293676] Swap cache stats: add 0, delete 0, find 0/0 [ 915.329490] Free swap = 0kB [ 915.347707] Total swap = 0kB [ 915.367397] 1965979 pages RAM [ 915.391624] 0 pages HighMem/MovableOnly [ 915.412690] 339053 pages reserved [ 915.425669] 0 pages cma reserved [ 915.439663] Out of memory: Kill process 31668 (syz-executor.5) score 1008 or sacrifice child [ 916.049012] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 916.062637] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 916.068046] CPU: 0 PID: 31695 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 916.075929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.086022] Call Trace: [ 916.088625] dump_stack+0x13e/0x194 [ 916.092530] dump_header+0x178/0x6d4 [ 916.096231] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 916.101768] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 916.107203] ? ___ratelimit+0x50/0x519 [ 916.111540] oom_kill_process.cold+0x10/0xae3 [ 916.116018] ? lock_downgrade+0x6e0/0x6e0 [ 916.123384] out_of_memory+0x2d5/0x1110 [ 916.127341] ? oom_killer_disable+0x1c0/0x1c0 [ 916.131822] ? mutex_trylock+0x152/0x1a0 [ 916.135866] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 916.140797] ? warn_alloc+0xf0/0xf0 [ 916.144445] __alloc_pages_nodemask+0x5d3/0x700 [ 916.149145] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 916.154149] ? find_held_lock+0x2d/0x110 [ 916.158212] alloc_pages_vma+0xc2/0x4a0 [ 916.162224] __handle_mm_fault+0x17b6/0x3280 [ 916.166614] ? copy_page_range+0x1d70/0x1d70 [ 916.171270] ? find_held_lock+0x2d/0x110 [ 916.175345] handle_mm_fault+0x288/0x7a0 [ 916.180005] __get_user_pages+0x44d/0x11e0 [ 916.184479] ? follow_page_mask+0x1580/0x1580 [ 916.188978] ? perf_trace_lock+0x109/0x4b0 [ 916.193643] ? lock_acquire+0x170/0x3f0 [ 916.197862] ? __mm_populate+0x1e3/0x2c0 [ 916.202358] populate_vma_page_range+0x17b/0x210 [ 916.207636] __mm_populate+0x195/0x2c0 [ 916.211529] ? populate_vma_page_range+0x210/0x210 [ 916.216514] ? security_capable+0x88/0xb0 [ 916.220651] SyS_mlockall+0x3f5/0x520 [ 916.224598] ? SyS_munlock+0xf0/0xf0 [ 916.228294] do_syscall_64+0x1d5/0x640 [ 916.232454] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 916.237795] RIP: 0033:0x45ca29 [ 916.240969] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 916.248674] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 916.255967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 916.263249] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 916.271029] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 916.279920] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 [ 916.303202] Mem-Info: [ 916.330880] active_anon:262743 inactive_anon:1063431 isolated_anon:0 [ 916.330880] active_file:40 inactive_file:0 isolated_file:0 [ 916.330880] unevictable:32406 dirty:5 writeback:0 unstable:0 [ 916.330880] slab_reclaimable:19533 slab_unreclaimable:107725 [ 916.330880] mapped:60920 shmem:4218 pagetables:14233 bounce:0 [ 916.330880] free:24770 free_pcp:0 free_cma:0 [ 916.380891] Node 0 active_anon:1040256kB inactive_anon:632148kB active_file:160kB inactive_file:0kB unevictable:112008kB isolated(anon):0kB isolated(file):0kB mapped:238276kB dirty:4kB writeback:0kB shmem:16860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 916.413742] Node 1 active_anon:10716kB inactive_anon:3621576kB active_file:0kB inactive_file:24kB unevictable:17616kB isolated(anon):0kB isolated(file):0kB mapped:5404kB dirty:16kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 916.491525] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.535183] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 916.540810] Node 0 DMA32 free:35992kB min:36272kB low:45340kB high:54408kB active_anon:1040244kB inactive_anon:627076kB active_file:4kB inactive_file:4kB unevictable:111980kB writepending:4kB present:3129332kB managed:2621260kB mlocked:111980kB kernel_stack:12960kB pagetables:24816kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 916.594034] lowmem_reserve[]: 0 0 0 0 0 [ 916.602875] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.647864] lowmem_reserve[]: 0 0 0 0 0 [ 916.651893] Node 1 Normal free:53184kB min:53612kB low:67012kB high:80412kB active_anon:10716kB inactive_anon:3621568kB active_file:4kB inactive_file:0kB unevictable:17616kB writepending:16kB present:3932160kB managed:3870192kB mlocked:17616kB kernel_stack:8832kB pagetables:32072kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 916.701457] lowmem_reserve[]: 0 0 0 0 0 [ 916.705492] Node 0 DMA: 6*4kB (UE) 4*8kB (UME) 0*16kB 6*32kB (UE) 5*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 916.741989] Node 0 DMA32: 1178*4kB (UE) 720*8kB (UE) 133*16kB (UME) 145*32kB (UME) 137*64kB (UME) 63*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 916.773660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 916.797935] Node 1 Normal: 128*4kB (UME) 32*8kB (UME) 42*16kB (UME) 229*32kB (UME) 188*64kB (UME) 99*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53184kB [ 916.814507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.836752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.845364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.860679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.884386] 11348 total pagecache pages [ 916.892388] 0 pages in swap cache [ 916.909974] Swap cache stats: add 0, delete 0, find 0/0 [ 916.915383] Free swap = 0kB [ 916.918460] Total swap = 0kB [ 916.921490] 1965979 pages RAM [ 916.924692] 0 pages HighMem/MovableOnly [ 916.933142] 339053 pages reserved [ 916.963247] 0 pages cma reserved [ 916.973122] Out of memory: Kill process 31681 (syz-executor.0) score 1009 or sacrifice child [ 917.004421] Killed process 31684 (syz-executor.0) total-vm:74972kB, anon-rss:18028kB, file-rss:48684kB, shmem-rss:0kB [ 917.065549] oom_reaper: reaped process 31684 (syz-executor.0), now anon-rss:18020kB, file-rss:17264kB, shmem-rss:0kB 07:51:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x3, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x3, 0x1, 0xe, 0x1}, &(0x7f00000001c0)=0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x5}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=""/11, 0xb, r4}}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdd9e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x32, &(0x7f00000000c0)=""/50, 0x0, 0x4, [], r3, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x0, 0x8000}, 0x10, r4, r5}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r4, 0x4) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r0, r7}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:26 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:26 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:26 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 917.464113] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 07:51:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0xc6) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 07:51:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:26 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 917.855738] FAT-fs (loop5): bogus number of reserved sectors [ 917.879652] FAT-fs (loop5): Can't find a valid FAT filesystem [ 918.137711] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 918.232884] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 918.246237] CPU: 0 PID: 31710 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 918.254163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.263903] Call Trace: [ 918.266508] dump_stack+0x13e/0x194 [ 918.270150] dump_header+0x178/0x6d4 [ 918.274233] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 918.280318] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 918.285526] ? ___ratelimit+0x50/0x519 [ 918.289607] oom_kill_process.cold+0x10/0xae3 [ 918.294415] ? lock_downgrade+0x6e0/0x6e0 [ 918.298587] out_of_memory+0x2d5/0x1110 [ 918.302579] ? oom_killer_disable+0x1c0/0x1c0 [ 918.307209] ? mutex_trylock+0x152/0x1a0 [ 918.311283] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 918.316154] ? warn_alloc+0xf0/0xf0 [ 918.319894] __alloc_pages_nodemask+0x5d3/0x700 [ 918.324577] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 918.329617] alloc_pages_vma+0xc2/0x4a0 [ 918.333604] __handle_mm_fault+0x17b6/0x3280 [ 918.339146] ? copy_page_range+0x1d70/0x1d70 [ 918.343569] ? find_held_lock+0x2d/0x110 [ 918.347655] handle_mm_fault+0x288/0x7a0 [ 918.351724] __get_user_pages+0x44d/0x11e0 [ 918.355975] ? follow_page_mask+0x1580/0x1580 [ 918.360554] ? perf_trace_lock+0x109/0x4b0 [ 918.364966] ? lock_acquire+0x170/0x3f0 [ 918.368975] ? __mm_populate+0x1e3/0x2c0 [ 918.373038] populate_vma_page_range+0x17b/0x210 [ 918.379744] __mm_populate+0x195/0x2c0 [ 918.384335] ? populate_vma_page_range+0x210/0x210 [ 918.389266] ? security_capable+0x88/0xb0 [ 918.394555] SyS_mlockall+0x3f5/0x520 [ 918.398451] ? SyS_munlock+0xf0/0xf0 [ 918.402431] do_syscall_64+0x1d5/0x640 [ 918.406341] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 918.411528] RIP: 0033:0x45ca29 [ 918.414717] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 918.422451] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 918.429729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 918.436999] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 918.444302] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 918.451677] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fb9c190f6d4 [ 920.020388] Mem-Info: [ 920.024261] active_anon:263013 inactive_anon:1063427 isolated_anon:0 [ 920.024261] active_file:20 inactive_file:0 isolated_file:1 [ 920.024261] unevictable:31384 dirty:0 writeback:0 unstable:0 [ 920.024261] slab_reclaimable:19525 slab_unreclaimable:107925 [ 920.024261] mapped:59445 shmem:4219 pagetables:14427 bounce:0 [ 920.024261] free:24942 free_pcp:54 free_cma:0 [ 920.063587] Node 0 active_anon:1041152kB inactive_anon:632152kB active_file:76kB inactive_file:60kB unevictable:110168kB isolated(anon):0kB isolated(file):0kB mapped:237672kB dirty:0kB writeback:12kB shmem:16876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 920.099751] Node 1 active_anon:10900kB inactive_anon:3621556kB active_file:4kB inactive_file:0kB unevictable:15368kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 920.181036] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:96kB writepending:0kB present:15992kB managed:15908kB mlocked:96kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.279490] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 920.284670] Node 0 DMA32 free:36260kB min:36272kB low:45340kB high:54408kB active_anon:1041140kB inactive_anon:627080kB active_file:16kB inactive_file:160kB unevictable:110072kB writepending:4kB present:3129332kB managed:2621260kB mlocked:110072kB kernel_stack:13248kB pagetables:25244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.331254] lowmem_reserve[]: 0 0 0 0 0 [ 920.335290] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.367530] lowmem_reserve[]: 0 0 0 0 0 [ 920.371904] Node 1 Normal free:53552kB min:53612kB low:67012kB high:80412kB active_anon:10900kB inactive_anon:3621556kB active_file:24kB inactive_file:0kB unevictable:15368kB writepending:0kB present:3932160kB managed:3870192kB mlocked:15368kB kernel_stack:9024kB pagetables:32420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.417299] lowmem_reserve[]: 0 0 0 0 0 [ 920.431518] Node 0 DMA: 7*4kB (UME) 10*8kB (UE) 1*16kB (U) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 920.456200] Node 0 DMA32: 985*4kB (UME) 476*8kB (UME) 157*16kB (UME) 139*32kB (UME) 137*64kB (UME) 64*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 35764kB [ 920.489967] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 920.508716] Node 1 Normal: 102*4kB (UME) 242*8kB (UME) 70*16kB (UME) 255*32kB (UME) 202*64kB (UME) 100*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 57064kB 07:51:29 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000400000000008334349add4c60bd30f458d48300010000000500050001000000080003"], 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf250100000008000200015e000014000100fc0200000000000000000000000000010500050002fb000005000600010000000c00040003000000d6430000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="34dea6365ec769c26b58", 0xa, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000002c0), 0x4) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x140b, 0x200, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x20040001) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r2, r7}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 920.632861] syz-executor.5 (31741) used greatest stack depth: 22880 bytes left [ 920.639375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.724359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 920.780847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.851966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 920.910113] 11685 total pagecache pages [ 920.936811] 0 pages in swap cache [ 920.965326] Swap cache stats: add 0, delete 0, find 0/0 [ 921.014246] Free swap = 0kB [ 921.031077] Total swap = 0kB [ 921.047368] 1965979 pages RAM [ 921.065014] 0 pages HighMem/MovableOnly [ 921.085938] 339053 pages reserved [ 921.105765] 0 pages cma reserved [ 921.125904] Out of memory: Kill process 31711 (syz-executor.4) score 1008 or sacrifice child 07:51:30 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:30 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:30 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x240000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000ac0)="f4a68c824f2a05b653e92af8b0e7617d5d97ce33c1d633d62bf1e3be96174154f641a32f37fd06b713fe2c3b97877096d4a1a23a47053258d7ae3c24be866ac00923421b1c48ed327dab270888a56726217dc07d3eb8152bfb564fbfa8e8fe6bb47c0d76cfee335e942f6d144c26c0b3aa46d058a7e38c4e7298697e3363c0e361a8e29553cb9bdb7fc65f1848182706c553569ae96d43606861914d817b2ef21b9c8d794da0c0392d627220f39b2d5e25b2e7da17d029102f51ce883a80a3caef2f6c654d33e85e7ed5c14e3260aee51c206791797e3f34eabdd90fe3ebb3c4e34b92cca0682d4f280aecaa5ecd8d83ab39de70a7ee983e39aa99230eee45e770d16e1d14ae0bf7df8e487e3f3a2a02c605c1e806228c2365b322b041051cd138b916ab924fa3cb02b64b403135165303e117b2af8c9f79e56ea5a48ff47a5a89edf18bdec118240f9dac26047b44863852e330ab4a4a4cdba7b20198e3e2345550057609bfec33e289b42c924f3e42cf1111c064643a49eefa79c901e6d1d7c4763a2997568faa4d574a30597e15e2dffc6d9ffd4127d335397bd51688a2776d5717e4fe815e42f2e04297906bbb735308c7aa7772e5de4ef6163a75d541d7db3e9d305f6449e527e875c7792e2f062cce1fc40622008e9962c211b970f27afa57f50316707d294694bb5ede66d9d0abcd7e50ed8e8e05c6d4a664f8dd691e490e4933daab27ce5b2ffbd59b13045a71b5e683dd6c4ff81cfc78617c7322bfc0b6d2ac6d14e7f1ed0ceb9663e0270233097131b0fd5699b4d45c92c45de07485b89b589100841f323808d1f7fde5085a446f5d94b39ff862f8329f970661382cc5d5335ab1009e36069f63e8f9603fcc2484c74d3c961725c6484a44d3a43583724048bd6a1b4e471a361050727ca67967b1822fc9ae6759897b09b6c33e1f06221789e8ea73a57f5d42047b7daec4f52ed5569d14ad5a98419fea7f8ed76ff0617f9799abd17a0ebb0b62603688ec1dab964413ecb2bc7e9167a82b3a1290af0f637290a2fe7f55f97a0a29e177b7ce50f2de7159d1e68ad7e23dd90c59f46c3847ccf0aec7bb6738f599ff253c8fd030e9610404bb57202ab736553eddf389dd1a34b7c6cacecede4baac22b593ee027484c2bac48d1afc71ccf8217a50a4dc5d5119ade4c7fa4a07fbb6051e08cad63294246293ebec9cb5c16bf3de556dac961840ca0ab7e86aa7772d9c109283eeeaddc55e7d4665159b7e06905cb99f8e2d01617f00899ce70077a805b26a7169b24efd45ce400bdedbec505cbcd06936af3904348eebe0405b07f84fb497772e952c3d433364e4c325edae75db20415faa4de168a4790e44d6e313abed1a6810121e3fbd4f5bf7487850d48320d4d6258d52d9aa397ff13c8c1c026411cf28c1daf61b3b87533b9d0ce9093cc58e50ee535f05fcf9cc3c6cd6e72a89580adfc34e3bf3ed68c16b27d736b6f41fc17cd6e6148c54eeae34095f1316585450ac2a8a22156b854633090ef041bb4a65396d52b5ebca8d68f656b25fa355be750d8cc16c39f28e313544a057798c96f2a9af79603ed6ef89aedc5a0f72ac497560bc14d3ff05c99c87bfe0cf4e6fc80c9df109b1af03dd9c2733cef1ac19007fea2691381146d8abc6e2b03cbd760cfab60b1f4b5f0597c1639c5bfb6c3ebd4274a03c88743e34050b737a54786e634753d471dad75d4d16d54eb9647d4489d7e2899c2f21bada26d562c97b305def35518c14adf4d17223dd9ab98d680c5d887b414da05f7490af0898ed1788365602214a4a7974c265df590fcd44a0e41914d13e43cd3040d2a340565b7ee017f05700e7ccb7c6a10509ad2bddfd4a2f72d1ac364b27535780a6875a73e1d6b7716f519251b33c35437a95cab9b19e6926c74a488b49cb88d8f616747a8ff078f5054892098067266e44a4b49e4059dd458405a84589b07a9c618c4a5fbf63607b8213425f50405bb2a67a6c6a9ce1f3f3b61f1275dc6c7390e888a8f0b7231669b55c4787bad5f60ed2e5deee6631db8ec7d0e89f33adf2e1845e295dc7ff3a841aef1ac88d428ef61c6fb2eaa7e088f0e7263ea2373944a3a23c60bcbff4c9fe19660f9b0dae2234670dd5da7180e2b8609f03cb11e3c3117e02b97709ea14dcc6cf1a7a41e4de5080ff6390d5574ccddd20c66677bcb8375a927efd7bba8c045a648b8c2525d4c9d0e827397f2add2268671305fc75060cfc52257ca2806b044907399924d18cc781d303767655e8769a312c887ceeb3988f1792b3c2ee53e787b5ad979146c5451552ed6ba5194873c4d886ddfd7dcff7c96c7bfb553469aec26aebccd1ee9f18d06aeb6d6607b7c117acad6474cbc5a1e5bf796cbc483c592d1361d86196f9dc874f4b08a41cd19b77321da3c1ad64274417962667e2d8ce28774a58de1a9d7c9050b838d06438bfe4c703eeb7930c1b7ddc50723907b8959ee83ff0514b06e0cae5fb5268c8f549e8300737ac4486de0b59be1297e78ddd7e7bae4f2a178b84851a5ea4d34897575176fba2fe8018d36bf479b81933ba8421a1a2914dd4f9cf0ca95be36ab03453e6e400baaddff00b9f33b19269cd0a0273e48bc0fadde739da870bb2e4beede37f8a44e9e899723bc02ac02afebcbbfaa7e47b960d3f5482e19ee4e754b6f778c8b5f96ad7e21968956bbe6c5bbd19af84bc954ea4ae72d9a4e54a793574a73b4b08a61310297f45902aeedd441d891712ba0e5090aa1f4047a0692afb157ef3a375aebb93fa7fefe30bc9caf91d11e6d4194b9e1ae81ba8dbf8b5d67045386cd3d0bcd41958b6ff08daa0679c30efbad32726543f1345a285da36fd542d0b6ea4b16e0c5cc4dbff7973d6b2858f32aa963fb7b21d925359c3ea481454636655ae670ae1fd1d090fe2be7816a41dccb2466c3f88e57d7635431eef11a89234a1ba6053e9ca9278abfb6d660bd824be4dc9e67f0e58d0146719751e23134c857a9187bfada4cdff653c840e159cf98ba4a28a0486dec6e9f32b33bb95824b8a891b6e5af352b576af25608c5091e0bb51dd54321e90bcbbea50bc952d8728ef7206a7b291b3baab6f2bca61fd099078f0328491caf4ace0f118a39155232c9423484f327b4f54329e67ea543c095f0cf6a9410d4ff2693f9532d0676ee44190e6bf6ae7490beadfe51557f40b0ae9e3fac7bf9d8ec2a8719769f448167f43f1f757709b9b2ff4c52b620f36f345808638721689cfa346a1633eb47c7adf571aa9ecb3e3796f81c997615a00a0073d318eccf8cfe90c9a9999609ae7488adcddb1794a5af71bf188e411a38118296137d399fa50a524d1734391f6cfced4cd6e968dc12e1b52dfae2fc0d797a61aa129f3e64fd6e9c53042847f9b38e15e3450ed1bae3cf316f79a55f7a4fbd4d94ccfac3ace0f98c84c8473587143e710d644a235de1edffe80b84b2e025f0eea813b53669268bd7f9ae485f6278d46abe783e88a876e7a5466d8b11be8ce9011ef173c07b3e54fba93d7243d4cc1b8e300c7d5bc92bbd5221bc1d4f0e13cb32c0de1159354b98be78eb484ca5fc1297fb2153ef37dd2bda831ee01c248c18c33f86b14b165d13c353f450ccbcb2a3218c48439ae20c22dba2336946ef88f6597f14dfeb33841fe617b2a9590173080e54faa056f79dcd931c3899274110283796a97a0e89fae8a1a51940ece4890e54524cfec84f7f6bd79f0c0ecb768b9454e077804d635834bbdb639720a08fbfc0970f6d86af131c3f6ce403532f7b1dd0f2ae6a7595b2712608d3ced64d6c6a4671dee8a1c8ea7da2b30f88fe0be7d2c1bcf240e98b4ec77b002f7c1c03c35725b700bcceb16301d7b6f00211a044d2a40279c36728f1e4d414e69f3e4d78e40db9c6832aa52b738052142fc94b99d63a99e629539eeb14c81ddf61291961eb3ec0b7ff7bd45e66d3692edd04f3c4cdac9f8a257b39548c75a893306b563adf4b8c81ba353f3d1108077ddbce72ff7339115bb2d8aab60c486f9b87964c66763b728d7fd699a715dd941503fed94223b6ad94a61c4fd089f81a35af396bc2771d77b61ff21743ace7edf7d060e054be675cb5d41f30ec7aa041b53ffa123e398ac68a164b8b9bee2cd875d9adc0ab8f3293b0fb3c13ada4e6e9067a0c02a303cb9dcdc6ff1a4423303e9714e90e5fee005aee178747d23ccabae749a86a07d51e98a65a1dfb6d03f476e22b89957d240237573e21cb1f0054dbdf37fbc52f59b5ea114a7d4af722534db945198e0ac578dab489300b9fb7f8499a49b7dd8a0ae49ee30987348ceafdd4a292424e094f945176ed69a15f356082b28e407dc72e8c24dd12cef221fad3e233a5eef83f3bfd3d004236749339bb467ac0af9b8e8da4458fb77c0368092d048dea95a91799361a84e6b42132668dc9dc62a9fbebd91fd80084def97aab0d16fb52d3c58385b6a32901354f2b07ffdc3ec48c1384754aaf9f4fb62c52c71dd3aafb2f820998b99ea57549d0aa8205df81cedb20c9bae42c3406f3dae041c11f832dbb1c2adb9a7518dc4ff902e6c84a7f84f9721cb3414c58b66707b2a9dcd6c8b2bf34ff5cb69618f3be753029de580d02cb19553dbc11a4dded35e85f6c38df326776e2ff4b635486e030bc1e2b261c8f9385f8513757c255521a88426b08d198549faf4cc7d6dfcd95d5fb07eb2c50bf9505a62e07940e449fcda236ec5084c32e844f6c3105e8453bbfd6f50eb98272f366dd4df5c4c12be861e7148bcf76430c4971c8278a6fe255671831260d66b604f7955559ee1affba138705cfbca6e1556dc89879a9fe7bbd3286f053a04767a80ea5ce12385d5f407360340e7db70d378c87bd87a66277fa6d389b37b85a404796f9440b461e7c0ff0e688161be280a71d44806778d35056c463d85bf7cebc997e94475351940af493a5ead4c01adf644d31840ff72177e7538152eb9116c2c5fe6d892340ac647e5a645c015331bac376a988d16c0de1f09adace4972b3eb340a7aae9d192953a02454ed5cc33a059ef274f8ab266f499c245753fc53517a025c74cee46d31fcc802d9f07dcd57da541329a8665ed22f0fbfcdf712cb887f895dde04564250669033e22a43c8ff9c00fe2c5527a94ef1368719df5d25192d21975455670b94f716e2511505c99fa9050e4629a7cfdc83a11a48e888824ae75e1d9c54bc57bccd6dde2c59d28746365fe749a30c137b94d3d4ac1b7a893e67a8c51a2c02165dde7b6376669fc4a3f0e95f2f305f8f2cd29d41567451f27d8c7c93f7635967fcb24ad16f70ef5749a1821c044bea7c52ca591f9aa5c61284a7f3e8c27b33af46d7a43a1b9f25958d4645ce962628c9b6f53529dc693c83220ddb8d318db4057301bbd1db9bedcca06f085fe51423b5f6794da20b1d38db473478bba5b54504dcd6504fce342ac50511ae02b92a65fd61f072f92bb8488bd023f3aa50e5ba0b3bc065f71f3a30f1fdeff66b5c2a68abc830964c510e515f589322f84f64ade9ffa00cbfca84e72ebd6eccd1e41b2c46d829cc12ea3d41568835aeac3c4ebeb5137c50445034380c46796cad8acd5aa49cf88c44d33b1355f9399d3c353e67cd3e63f5bae837ebf1cc4ab01a8e42b672f8b34693949d73067ba8e77fb5881e798fe7e524472630f8d4d3f9442b710d58e3b9e4d0c1c21137bef1af27eb178348db933dba54a9227e20bc347aa6492196274145ddd5525880d5d5dd3e13a26d4645c6e61bb2f3851e03ca2b200e98058856cac51f", &(0x7f0000000240)="bb8939ed9da73865b8bfea0df28cdfdd53bbac81a93fb5ad667bc429d2a1b9c64188cb0f1c8bdc6b1162e04ad6562c0c7a4694999c322252c8ec2c5a3fc668ade4dd32fa711af94492ff6855ea3aaed18c65f78596f1fb8a1c339cc56412c7d838a8c0cb41a0c9895d43a12ca502680b9831dd48d855a3ac91e5233b1e3c63ffc18ccfd64bb2e10faa0a2c2b6f6e160412f1", 0x2}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r3) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000180)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'batadv_slave_0\x00'}, 0x3a, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r1, r4}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:31 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:31 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffefc) [ 923.093784] syz-executor.3 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 923.164587] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 923.185338] CPU: 0 PID: 31763 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 923.193261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.202806] Call Trace: [ 923.205410] dump_stack+0x13e/0x194 [ 923.209047] dump_header+0x178/0x6d4 [ 923.212772] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 923.217796] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 923.222906] ? ___ratelimit+0x50/0x519 [ 923.227239] oom_kill_process.cold+0x10/0xae3 [ 923.231932] ? lock_downgrade+0x6e0/0x6e0 [ 923.236091] out_of_memory+0x2d5/0x1110 [ 923.240336] ? oom_killer_disable+0x1c0/0x1c0 [ 923.244892] ? mutex_trylock+0x152/0x1a0 [ 923.248968] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 923.254222] ? warn_alloc+0xf0/0xf0 [ 923.257871] __alloc_pages_nodemask+0x5d3/0x700 [ 923.262558] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 923.267745] ? find_held_lock+0x2d/0x110 [ 923.271910] alloc_pages_vma+0xc2/0x4a0 [ 923.276066] __handle_mm_fault+0x17b6/0x3280 [ 923.281575] ? copy_page_range+0x1d70/0x1d70 [ 923.285992] ? find_held_lock+0x2d/0x110 [ 923.290159] handle_mm_fault+0x288/0x7a0 [ 923.294225] __get_user_pages+0x44d/0x11e0 [ 923.298473] ? follow_page_mask+0x1580/0x1580 [ 923.302974] ? perf_trace_lock+0x109/0x4b0 [ 923.307216] ? lock_acquire+0x170/0x3f0 [ 923.311205] ? __mm_populate+0x1e3/0x2c0 [ 923.315621] populate_vma_page_range+0x17b/0x210 [ 923.320481] __mm_populate+0x195/0x2c0 [ 923.324467] ? populate_vma_page_range+0x210/0x210 [ 923.329404] ? security_capable+0x88/0xb0 [ 923.334451] SyS_mlockall+0x3f5/0x520 [ 923.339038] ? SyS_munlock+0xf0/0xf0 [ 923.342776] do_syscall_64+0x1d5/0x640 [ 923.346671] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 923.352044] RIP: 0033:0x45ca29 [ 923.355411] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 923.363128] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 923.370400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 923.378098] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 923.386678] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 923.394086] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fb9c190f6d4 [ 923.525281] Mem-Info: [ 923.530382] active_anon:264057 inactive_anon:1067912 isolated_anon:0 [ 923.530382] active_file:14 inactive_file:17 isolated_file:0 [ 923.530382] unevictable:25048 dirty:0 writeback:0 unstable:0 [ 923.530382] slab_reclaimable:19516 slab_unreclaimable:108852 [ 923.530382] mapped:57375 shmem:4218 pagetables:14442 bounce:0 [ 923.530382] free:24904 free_pcp:30 free_cma:0 [ 923.582420] Node 0 active_anon:1045176kB inactive_anon:649200kB active_file:68kB inactive_file:8kB unevictable:86628kB isolated(anon):0kB isolated(file):0kB mapped:225568kB dirty:0kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 923.632851] Node 1 active_anon:11052kB inactive_anon:3622448kB active_file:0kB inactive_file:60kB unevictable:13564kB isolated(anon):0kB isolated(file):0kB mapped:3932kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 923.895787] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.099073] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 924.123788] Node 0 DMA32 free:35772kB min:36272kB low:45340kB high:54408kB active_anon:1045148kB inactive_anon:644128kB active_file:36kB inactive_file:0kB unevictable:87040kB writepending:0kB present:3129332kB managed:2621260kB mlocked:87040kB kernel_stack:13248kB pagetables:25416kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 924.171506] lowmem_reserve[]: 0 0 0 0 0 [ 924.180108] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.245467] lowmem_reserve[]: 0 0 0 0 0 [ 924.270124] Node 1 Normal free:53392kB min:53612kB low:67012kB high:80412kB active_anon:11052kB inactive_anon:3622448kB active_file:4kB inactive_file:4kB unevictable:13592kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13592kB kernel_stack:8896kB pagetables:32308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 924.346829] lowmem_reserve[]: 0 0 0 0 0 [ 924.379469] Node 0 DMA: 9*4kB (UME) 7*8kB (UE) 1*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 924.484209] Node 0 DMA32: 972*4kB (UME) 322*8kB (UME) 255*16kB (UME) 141*32kB (UME) 140*64kB (UME) 64*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36304kB [ 924.637249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 924.730061] Node 1 Normal: 96*4kB (UME) 58*8kB (UME) 32*16kB (UME) 202*32kB (UME) 204*64kB (UME) 100*128kB (UM) 45*256kB (UM) 14*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53392kB [ 924.839146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 924.917355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 925.002294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.037710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 925.072748] 8114 total pagecache pages [ 925.097084] 0 pages in swap cache [ 925.100652] Swap cache stats: add 0, delete 0, find 0/0 [ 925.113187] Free swap = 0kB [ 925.133454] Total swap = 0kB [ 925.142946] 1965979 pages RAM [ 925.154726] 0 pages HighMem/MovableOnly [ 925.162169] 339053 pages reserved [ 925.173170] 0 pages cma reserved [ 925.181078] Out of memory: Kill process 31488 (syz-executor.1) score 1007 or sacrifice child [ 925.195165] Killed process 31488 (syz-executor.1) total-vm:74972kB, anon-rss:18380kB, file-rss:34760kB, shmem-rss:0kB 07:51:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 925.404570] oom_reaper: reaped process 31488 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:51:34 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:34 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:34 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:35 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:35 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffefc) [ 926.432336] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 926.475090] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 926.485811] CPU: 0 PID: 31794 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 926.494265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.504153] Call Trace: [ 926.506752] dump_stack+0x13e/0x194 [ 926.510399] dump_header+0x178/0x6d4 [ 926.514105] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 926.519134] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 926.524333] ? ___ratelimit+0x50/0x519 [ 926.528600] oom_kill_process.cold+0x10/0xae3 [ 926.533364] ? lock_acquire+0x170/0x3f0 [ 926.537724] ? lock_downgrade+0x6e0/0x6e0 [ 926.541885] out_of_memory+0x2d5/0x1110 [ 926.545882] ? oom_killer_disable+0x1c0/0x1c0 [ 926.550731] ? mutex_trylock+0x152/0x1a0 [ 926.554789] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 926.559643] ? warn_alloc+0xf0/0xf0 [ 926.563298] __alloc_pages_nodemask+0x5d3/0x700 [ 926.569027] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 926.574129] ? find_held_lock+0x2d/0x110 [ 926.578202] alloc_pages_vma+0xc2/0x4a0 [ 926.582177] __handle_mm_fault+0x17b6/0x3280 [ 926.586585] ? copy_page_range+0x1d70/0x1d70 [ 926.591605] ? find_held_lock+0x2d/0x110 [ 926.595769] handle_mm_fault+0x288/0x7a0 [ 926.599849] __get_user_pages+0x44d/0x11e0 [ 926.604091] ? follow_page_mask+0x1580/0x1580 [ 926.608603] ? perf_trace_lock+0x109/0x4b0 [ 926.613804] ? lock_acquire+0x170/0x3f0 [ 926.617774] ? __mm_populate+0x1e3/0x2c0 [ 926.621941] populate_vma_page_range+0x17b/0x210 [ 926.626878] __mm_populate+0x195/0x2c0 [ 926.630886] ? populate_vma_page_range+0x210/0x210 [ 926.636440] ? security_capable+0x88/0xb0 [ 926.640942] SyS_mlockall+0x3f5/0x520 [ 926.644818] ? SyS_munlock+0xf0/0xf0 [ 926.648873] do_syscall_64+0x1d5/0x640 [ 926.654511] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 926.660214] RIP: 0033:0x45ca29 [ 926.663391] RSP: 002b:00007f4105d72c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 926.671291] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 926.679529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 926.686800] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 926.694069] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 926.701513] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f4105d736d4 [ 926.729462] Mem-Info: [ 926.731921] active_anon:263896 inactive_anon:1063882 isolated_anon:0 [ 926.731921] active_file:13 inactive_file:23 isolated_file:0 [ 926.731921] unevictable:29787 dirty:20 writeback:0 unstable:0 [ 926.731921] slab_reclaimable:19528 slab_unreclaimable:108359 [ 926.731921] mapped:60208 shmem:4218 pagetables:14407 bounce:0 [ 926.731921] free:24913 free_pcp:0 free_cma:0 [ 926.777904] Node 0 active_anon:1044724kB inactive_anon:636492kB active_file:40kB inactive_file:0kB unevictable:103244kB isolated(anon):0kB isolated(file):0kB mapped:233908kB dirty:80kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 926.816842] Node 1 active_anon:10860kB inactive_anon:3619036kB active_file:0kB inactive_file:4kB unevictable:15904kB isolated(anon):0kB isolated(file):0kB mapped:6924kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 926.853350] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.902957] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 926.911357] Node 0 DMA32 free:36068kB min:36272kB low:45340kB high:54408kB active_anon:1044712kB inactive_anon:631420kB active_file:56kB inactive_file:64kB unevictable:103276kB writepending:80kB present:3129332kB managed:2621260kB mlocked:103276kB kernel_stack:13184kB pagetables:25464kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.953561] lowmem_reserve[]: 0 0 0 0 0 [ 926.957681] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.992270] lowmem_reserve[]: 0 0 0 0 0 [ 926.996370] Node 1 Normal free:53352kB min:53612kB low:67012kB high:80412kB active_anon:10860kB inactive_anon:3619036kB active_file:0kB inactive_file:8kB unevictable:15904kB writepending:0kB present:3932160kB managed:3870192kB mlocked:15904kB kernel_stack:8960kB pagetables:32120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.032593] lowmem_reserve[]: 0 0 0 0 0 [ 927.036808] Node 0 DMA: 7*4kB (UME) 8*8kB (UME) 1*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 927.062348] Node 0 DMA32: 959*4kB (UE) 177*8kB (UME) 488*16kB (UME) 131*32kB (UME) 134*64kB (UME) 64*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36068kB [ 927.082906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 927.118775] Node 1 Normal: 126*4kB (UME) 36*8kB (UME) 27*16kB (UME) 167*32kB (UME) 217*64kB (UME) 101*128kB (UM) 44*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53352kB [ 927.155384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.165003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.190686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.206133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.215253] 10632 total pagecache pages [ 927.239351] 0 pages in swap cache [ 927.242968] Swap cache stats: add 0, delete 0, find 0/0 [ 927.264694] Free swap = 0kB [ 927.271310] Total swap = 0kB [ 927.274352] 1965979 pages RAM [ 927.283050] 0 pages HighMem/MovableOnly [ 927.290652] 339053 pages reserved [ 927.294370] 0 pages cma reserved [ 927.299770] Out of memory: Kill process 31788 (syz-executor.3) score 1008 or sacrifice child [ 927.308524] Killed process 31800 (syz-executor.3) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 927.344527] oom_reaper: reaped process 31800 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 927.878335] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 927.896813] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 927.903174] CPU: 1 PID: 31803 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 927.911060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.920579] Call Trace: [ 927.923209] dump_stack+0x13e/0x194 [ 927.926841] dump_header+0x178/0x6d4 [ 927.930648] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 927.935653] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 927.940778] ? ___ratelimit+0x50/0x519 [ 927.944671] oom_kill_process.cold+0x10/0xae3 [ 927.949326] ? lock_acquire+0x170/0x3f0 [ 927.953330] ? lock_downgrade+0x6e0/0x6e0 [ 927.957921] out_of_memory+0x2d5/0x1110 [ 927.961891] ? oom_killer_disable+0x1c0/0x1c0 [ 927.966539] ? mutex_trylock+0x152/0x1a0 [ 927.971509] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 927.976457] ? warn_alloc+0xf0/0xf0 [ 927.980102] __alloc_pages_nodemask+0x5d3/0x700 [ 927.984857] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 927.989875] ? find_held_lock+0x2d/0x110 [ 927.994401] alloc_pages_vma+0xc2/0x4a0 [ 927.999433] __handle_mm_fault+0x17b6/0x3280 [ 928.003844] ? copy_page_range+0x1d70/0x1d70 [ 928.008607] ? find_held_lock+0x2d/0x110 [ 928.012768] handle_mm_fault+0x288/0x7a0 [ 928.016831] __get_user_pages+0x44d/0x11e0 [ 928.021600] ? follow_page_mask+0x1580/0x1580 [ 928.026266] ? perf_trace_lock+0x109/0x4b0 [ 928.030601] ? lock_acquire+0x170/0x3f0 [ 928.034596] ? __mm_populate+0x1e3/0x2c0 [ 928.039023] populate_vma_page_range+0x17b/0x210 [ 928.043899] __mm_populate+0x195/0x2c0 [ 928.047793] ? populate_vma_page_range+0x210/0x210 [ 928.052731] ? security_capable+0x88/0xb0 [ 928.056996] SyS_mlockall+0x3f5/0x520 [ 928.060816] ? SyS_munlock+0xf0/0xf0 [ 928.065772] do_syscall_64+0x1d5/0x640 [ 928.069757] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 928.074948] RIP: 0033:0x45ca29 [ 928.078142] RSP: 002b:00007fa0858c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 928.086205] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 928.093685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 928.101138] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 928.108752] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 928.116108] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fa0858ca6d4 [ 928.141913] Mem-Info: [ 928.144360] active_anon:263893 inactive_anon:1063861 isolated_anon:0 [ 928.144360] active_file:10 inactive_file:21 isolated_file:0 [ 928.144360] unevictable:29809 dirty:20 writeback:0 unstable:0 [ 928.144360] slab_reclaimable:19527 slab_unreclaimable:108359 [ 928.144360] mapped:60230 shmem:4218 pagetables:14375 bounce:0 [ 928.144360] free:24974 free_pcp:62 free_cma:0 [ 928.188676] Node 0 active_anon:1044712kB inactive_anon:636432kB active_file:36kB inactive_file:84kB unevictable:103332kB isolated(anon):0kB isolated(file):0kB mapped:233996kB dirty:80kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 928.227495] Node 1 active_anon:10860kB inactive_anon:3619012kB active_file:4kB inactive_file:0kB unevictable:15904kB isolated(anon):0kB isolated(file):0kB mapped:6924kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 928.261877] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 928.296135] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 928.301296] Node 0 DMA32 free:36100kB min:36272kB low:45340kB high:54408kB active_anon:1044700kB inactive_anon:631360kB active_file:184kB inactive_file:0kB unevictable:103276kB writepending:80kB present:3129332kB managed:2621260kB mlocked:103276kB kernel_stack:13152kB pagetables:25336kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 928.340733] lowmem_reserve[]: 0 0 0 0 0 [ 928.344870] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 928.382201] lowmem_reserve[]: 0 0 0 0 0 [ 928.386284] Node 1 Normal free:53352kB min:53612kB low:67012kB high:80412kB active_anon:10860kB inactive_anon:3619012kB active_file:0kB inactive_file:8kB unevictable:15904kB writepending:0kB present:3932160kB managed:3870192kB mlocked:15904kB kernel_stack:8960kB pagetables:32120kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 928.427145] lowmem_reserve[]: 0 0 0 0 0 [ 928.431184] Node 0 DMA: 7*4kB (UME) 8*8kB (UME) 1*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 928.458722] Node 0 DMA32: 959*4kB (UE) 177*8kB (UME) 488*16kB (UME) 132*32kB (UME) 134*64kB (UME) 64*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36100kB [ 928.474365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 928.502002] Node 1 Normal: 126*4kB (UME) 36*8kB (UME) 27*16kB (UME) 167*32kB (UME) 217*64kB (UME) 101*128kB (UM) 44*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53352kB [ 928.532377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.541478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 928.564480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.573813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 928.586315] 10631 total pagecache pages [ 928.590479] 0 pages in swap cache [ 928.593962] Swap cache stats: add 0, delete 0, find 0/0 [ 928.599363] Free swap = 0kB [ 928.608524] Total swap = 0kB [ 928.611558] 1965979 pages RAM [ 928.614739] 0 pages HighMem/MovableOnly [ 928.618849] 339053 pages reserved [ 928.622294] 0 pages cma reserved [ 928.625728] Out of memory: Kill process 31788 (syz-executor.3) score 1008 or sacrifice child [ 928.634431] Killed process 31789 (syz-executor.3) total-vm:75104kB, anon-rss:18036kB, file-rss:44076kB, shmem-rss:0kB [ 928.732388] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 928.747217] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 928.753063] CPU: 0 PID: 6353 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 928.760526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.770929] Call Trace: [ 928.773528] dump_stack+0x13e/0x194 [ 928.777251] dump_header+0x178/0x6d4 [ 928.781087] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 928.786204] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 928.791311] ? ___ratelimit+0x50/0x519 [ 928.795203] oom_kill_process.cold+0x10/0xae3 [ 928.799801] ? lock_downgrade+0x6e0/0x6e0 [ 928.803962] out_of_memory+0x2d5/0x1110 [ 928.807944] ? oom_killer_disable+0x1c0/0x1c0 [ 928.812439] ? mutex_trylock+0x152/0x1a0 [ 928.816624] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 928.821705] ? warn_alloc+0xf0/0xf0 [ 928.825337] __alloc_pages_nodemask+0x5d3/0x700 [ 928.829994] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 928.834992] ? lock_downgrade+0x6e0/0x6e0 [ 928.839152] alloc_pages_current+0xe7/0x1e0 [ 928.843456] __page_cache_alloc+0x245/0x3d0 [ 928.847771] filemap_fault+0xc18/0x1c50 [ 928.851734] ? __lock_page_or_retry+0x8a0/0x8a0 [ 928.856390] ? lock_acquire+0x170/0x3f0 [ 928.860350] ? ext4_filemap_fault+0x7c/0xb0 [ 928.864732] ext4_filemap_fault+0x84/0xb0 [ 928.868880] __do_fault+0xfa/0x380 [ 928.872436] __handle_mm_fault+0x22e9/0x3280 [ 928.876851] ? copy_page_range+0x1d70/0x1d70 [ 928.881250] ? find_held_lock+0x2d/0x110 [ 928.885419] handle_mm_fault+0x288/0x7a0 [ 928.889575] __do_page_fault+0x4bc/0xb40 [ 928.893633] ? vmalloc_fault+0xdf0/0xdf0 [ 928.897690] ? do_page_fault+0x60/0x4f2 [ 928.901651] ? page_fault+0x2f/0x50 [ 928.905269] page_fault+0x45/0x50 [ 928.908797] RIP: 0001:0x11c [ 928.911703] RSP: 35b81fa8:000000c4200396e8 EFLAGS: d7d2f3fa73 [ 928.926738] Mem-Info: 07:51:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)="d2b317b97df3264b287f6bd1fdf21efba6cfc7a5a1bb11c9be1b72bc6cb20827c0958b4c5f050edf69a49012da8944455cea017028f95e7d377183b32b4663de1e6421b5d9b20150e8eefa13810f77ebfd95922e12df3fa9bf175ea457faf088d50225bfcd41485cf2861946fa8c22e1", 0x28, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r2) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000180)}) r5 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="b42c91e2e6ce2e44d170885bfb7f5b5d7e5d9f979cbfdd572176d3d125ce665937acf50aba16e2906fff6797c8d99ec5c1e0846b6eb1f13f6e73cfc0895f67acd1a127e1388136dee9d186601c934b940ad5a892f30bf65aef5adc419955a1b62abe0c39e5b6e896ec3f227d6c6cf0710740bd0ecd2c6a282ff2117172a89491eaa0a9949dc33eec19354bf9484147c70353dea9a45613f7134dca4674416f685454fefb06d0a05a21b25862eafa313395aa0bd9c95f6958b0db77701a1029019c4fc9e79dd3ae1ad097d824f488b3fd3fd5a4da413f78eb5b0e53096bcc9d2be2dcac057b70e6d8a7fc424e5287e1b01b963622", 0xf4, r1) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r0, r5}, &(0x7f00000003c0)=""/243, 0xf3, 0x0) 07:51:38 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 928.995268] active_anon:263364 inactive_anon:1064546 isolated_anon:0 [ 928.995268] active_file:493 inactive_file:2432 isolated_file:64 [ 928.995268] unevictable:24274 dirty:19 writeback:0 unstable:0 [ 928.995268] slab_reclaimable:19527 slab_unreclaimable:108255 [ 928.995268] mapped:59278 shmem:4218 pagetables:14338 bounce:0 [ 928.995268] free:27116 free_pcp:387 free_cma:0 07:51:38 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000140)={0x6, "1e35c0e59ef4ce33e62a1a7a8feb3eed7c8b649574acfea07fd8a7e8e1706d58", 0x2, 0x1}) 07:51:38 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 929.274901] Node 0 active_anon:1042692kB inactive_anon:661996kB active_file:15748kB inactive_file:5304kB unevictable:47224kB isolated(anon):0kB isolated(file):128kB mapped:222920kB dirty:128kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:51:38 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:38 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffefc) [ 929.548400] Node 1 active_anon:10844kB inactive_anon:3619096kB active_file:0kB inactive_file:0kB unevictable:76kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 929.777534] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:4kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.936212] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 929.941320] Node 0 DMA32 free:35896kB min:36272kB low:45340kB high:54408kB active_anon:1044780kB inactive_anon:631952kB active_file:1972kB inactive_file:1812kB unevictable:93568kB writepending:128kB present:3129332kB managed:2621260kB mlocked:93536kB kernel_stack:13280kB pagetables:25304kB bounce:0kB free_pcp:760kB local_pcp:340kB free_cma:0kB [ 930.083959] lowmem_reserve[]: 0 0 0 0 0 [ 930.138371] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 930.232199] lowmem_reserve[]: 0 0 0 0 0 [ 930.241325] Node 1 Normal free:53520kB min:53612kB low:67012kB high:80412kB active_anon:10924kB inactive_anon:3619012kB active_file:4kB inactive_file:16kB unevictable:15336kB writepending:12kB present:3932160kB managed:3870192kB mlocked:15336kB kernel_stack:8832kB pagetables:32020kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 930.291854] lowmem_reserve[]: 0 0 0 0 0 [ 930.308846] Node 0 DMA: 6*4kB (UE) 8*8kB (UME) 2*16kB (UM) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 930.327300] Node 0 DMA32: 1092*4kB (UME) 224*8kB (UME) 541*16kB (UME) 97*32kB (UME) 131*64kB (UME) 64*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36544kB [ 930.343029] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 930.355129] Node 1 Normal: 149*4kB (UME) 29*8kB (UME) 95*16kB (UE) 68*32kB (UME) 246*64kB (UME) 105*128kB (UM) 44*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53676kB [ 930.371594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.380719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 930.389461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 930.399389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 930.408225] 8703 total pagecache pages [ 930.412332] 0 pages in swap cache [ 930.416104] Swap cache stats: add 0, delete 0, find 0/0 [ 930.422347] Free swap = 0kB [ 930.425600] Total swap = 0kB [ 930.428766] 1965979 pages RAM [ 930.432567] 0 pages HighMem/MovableOnly [ 930.437142] 339053 pages reserved [ 930.440855] 0 pages cma reserved [ 930.444399] Out of memory: Kill process 31791 (syz-executor.1) score 1007 or sacrifice child [ 931.082823] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 931.193758] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 931.203498] CPU: 0 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 931.211407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.221370] Call Trace: [ 931.223973] dump_stack+0x13e/0x194 [ 931.227597] dump_header+0x178/0x6d4 [ 931.231570] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 931.236591] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 931.242143] ? ___ratelimit+0x50/0x519 [ 931.246045] oom_kill_process.cold+0x10/0xae3 [ 931.250544] ? lock_acquire+0x170/0x3f0 [ 931.254540] ? lock_downgrade+0x6e0/0x6e0 [ 931.258820] out_of_memory+0x2d5/0x1110 [ 931.262864] ? oom_killer_disable+0x1c0/0x1c0 [ 931.267642] ? mutex_trylock+0x152/0x1a0 [ 931.271835] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 931.276698] ? warn_alloc+0xf0/0xf0 [ 931.280516] __alloc_pages_nodemask+0x5d3/0x700 [ 931.285481] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 931.290589] ? lock_downgrade+0x6e0/0x6e0 [ 931.294898] alloc_pages_current+0xe7/0x1e0 [ 931.299238] __page_cache_alloc+0x245/0x3d0 [ 931.304021] filemap_fault+0xc18/0x1c50 [ 931.307983] ? __lock_page_or_retry+0x8a0/0x8a0 [ 931.312734] ? lock_acquire+0x170/0x3f0 [ 931.316695] ? ext4_filemap_fault+0x7c/0xb0 [ 931.321001] ext4_filemap_fault+0x84/0xb0 [ 931.325134] __do_fault+0xfa/0x380 [ 931.328825] __handle_mm_fault+0x22e9/0x3280 [ 931.333209] ? copy_page_range+0x1d70/0x1d70 [ 931.337610] ? find_held_lock+0x2d/0x110 [ 931.341876] handle_mm_fault+0x288/0x7a0 [ 931.346031] __do_page_fault+0x4bc/0xb40 [ 931.350091] ? vmalloc_fault+0xdf0/0xdf0 [ 931.354147] ? do_page_fault+0x60/0x4f2 [ 931.358451] ? page_fault+0x2f/0x50 [ 931.362057] page_fault+0x45/0x50 [ 931.365745] RIP: 75b22e40:0xe2dd3 [ 931.369280] RSP: e2e20:0000000000000952 EFLAGS: 0000000d [ 931.379617] Mem-Info: [ 931.391223] active_anon:263501 inactive_anon:1063861 isolated_anon:0 [ 931.391223] active_file:17 inactive_file:3 isolated_file:0 [ 931.391223] unevictable:29393 dirty:0 writeback:0 unstable:0 [ 931.391223] slab_reclaimable:19410 slab_unreclaimable:109322 [ 931.391223] mapped:58319 shmem:4218 pagetables:14394 bounce:0 [ 931.391223] free:24809 free_pcp:67 free_cma:0 [ 931.432795] Node 0 active_anon:1043080kB inactive_anon:636432kB active_file:60kB inactive_file:16kB unevictable:101736kB isolated(anon):0kB isolated(file):0kB mapped:233276kB dirty:0kB writeback:0kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 931.469295] Node 1 active_anon:10924kB inactive_anon:3619012kB active_file:24kB inactive_file:0kB unevictable:15836kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 931.509725] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:76kB writepending:0kB present:15992kB managed:15908kB mlocked:76kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.547518] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 931.552692] Node 0 DMA32 free:35632kB min:36272kB low:45340kB high:54408kB active_anon:1043068kB inactive_anon:631360kB active_file:40kB inactive_file:0kB unevictable:101660kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101660kB kernel_stack:13248kB pagetables:25512kB bounce:0kB free_pcp:268kB local_pcp:4kB free_cma:0kB [ 931.592244] lowmem_reserve[]: 0 0 0 0 0 [ 931.596325] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.632737] lowmem_reserve[]: 0 0 0 0 0 [ 931.636963] Node 1 Normal free:53180kB min:53612kB low:67012kB high:80412kB active_anon:10924kB inactive_anon:3619012kB active_file:36kB inactive_file:0kB unevictable:15836kB writepending:0kB present:3932160kB managed:3870192kB mlocked:15836kB kernel_stack:8832kB pagetables:32020kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.671001] lowmem_reserve[]: 0 0 0 0 0 [ 931.674998] Node 0 DMA: 6*4kB (UE) 8*8kB (UME) 2*16kB (UM) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 931.697940] Node 0 DMA32: 1056*4kB (UME) 290*8kB (UME) 306*16kB (UME) 122*32kB (UME) 131*64kB (UME) 64*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36016kB [ 931.714004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 931.731797] Node 1 Normal: 149*4kB (UME) 31*8kB (UME) 97*16kB (UME) 69*32kB (UME) 237*64kB (UME) 105*128kB (UM) 44*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53180kB [ 931.755779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.764991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.773804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 931.786237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 931.795009] 8709 total pagecache pages [ 931.798958] 0 pages in swap cache [ 931.802401] Swap cache stats: add 0, delete 0, find 0/0 [ 931.810971] Free swap = 0kB [ 931.813985] Total swap = 0kB [ 931.817175] 1965979 pages RAM [ 931.820272] 0 pages HighMem/MovableOnly [ 931.824267] 339053 pages reserved [ 931.831271] 0 pages cma reserved [ 931.834644] Out of memory: Kill process 31817 (syz-executor.0) score 1007 or sacrifice child [ 931.843326] Killed process 31817 (syz-executor.0) total-vm:75104kB, anon-rss:17936kB, file-rss:39212kB, shmem-rss:0kB [ 931.924681] oom_reaper: reaped process 31817 (syz-executor.0), now anon-rss:18020kB, file-rss:5488kB, shmem-rss:0kB [ 932.780965] oom_reaper: reaped process 31830 (syz-executor.1), now anon-rss:17968kB, file-rss:4396kB, shmem-rss:0kB 07:51:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:42 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:42 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:42 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) signalfd4(r1, &(0x7f0000000100)={[0x5]}, 0x8, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 934.422980] syz-executor.1 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 934.553784] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 934.597273] CPU: 0 PID: 31840 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 934.605191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.614738] Call Trace: [ 934.617336] dump_stack+0x13e/0x194 [ 934.620982] dump_header+0x178/0x6d4 [ 934.624704] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 934.629723] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 934.634842] ? ___ratelimit+0x50/0x519 [ 934.638783] oom_kill_process.cold+0x10/0xae3 [ 934.643727] ? lock_downgrade+0x6e0/0x6e0 [ 934.648145] out_of_memory+0x2d5/0x1110 [ 934.652392] ? oom_killer_disable+0x1c0/0x1c0 [ 934.657113] ? mutex_trylock+0x152/0x1a0 [ 934.661276] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 934.666138] ? warn_alloc+0xf0/0xf0 [ 934.669783] __alloc_pages_nodemask+0x5d3/0x700 [ 934.674486] ? refill_stock+0x270/0x270 [ 934.678466] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 934.683663] ? get_mem_cgroup_from_mm+0x157/0x460 [ 934.688512] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 934.693369] alloc_pages_vma+0xc2/0x4a0 [ 934.697361] do_huge_pmd_wp_page+0x1091/0x3190 [ 934.702105] ? perf_trace_lock+0x109/0x4b0 [ 934.706428] ? __split_huge_pmd+0x2180/0x2180 [ 934.712148] ? save_trace+0x290/0x290 [ 934.715954] ? pmd_val+0x6c/0xd0 [ 934.719322] ? add_mm_counter_fast.part.0+0x30/0x30 [ 934.724442] __handle_mm_fault+0x1676/0x3280 [ 934.731032] ? copy_page_range+0x1d70/0x1d70 [ 934.735536] ? find_held_lock+0x2d/0x110 [ 934.739881] handle_mm_fault+0x288/0x7a0 [ 934.743950] __do_page_fault+0x4bc/0xb40 [ 934.748540] ? vmalloc_fault+0xdf0/0xdf0 [ 934.752728] ? do_page_fault+0x60/0x4f2 [ 934.756707] ? page_fault+0x2f/0x50 [ 934.760338] page_fault+0x45/0x50 [ 934.763790] RIP: e3f6a:0xfffffffffffffffe [ 934.768023] RSP: 0000:00000000007901b0 EFLAGS: 007901b8 [ 935.026499] Mem-Info: [ 935.135162] active_anon:264470 inactive_anon:1063864 isolated_anon:0 [ 935.135162] active_file:34 inactive_file:0 isolated_file:0 [ 935.135162] unevictable:28010 dirty:3 writeback:0 unstable:0 [ 935.135162] slab_reclaimable:19378 slab_unreclaimable:109349 [ 935.135162] mapped:58342 shmem:4218 pagetables:14409 bounce:0 [ 935.135162] free:24924 free_pcp:0 free_cma:0 [ 935.325968] Node 0 active_anon:1046924kB inactive_anon:636448kB active_file:40kB inactive_file:0kB unevictable:96928kB isolated(anon):0kB isolated(file):104kB mapped:233100kB dirty:12kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 935.355634] Node 1 active_anon:10956kB inactive_anon:3619008kB active_file:0kB inactive_file:0kB unevictable:15112kB isolated(anon):0kB isolated(file):0kB mapped:268kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 935.387347] Node 0 DMA free:10400kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5072kB active_file:0kB inactive_file:0kB unevictable:100kB writepending:0kB present:15992kB managed:15908kB mlocked:100kB kernel_stack:0kB pagetables:44kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.414561] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 935.419828] Node 0 DMA32 free:36140kB min:36272kB low:45340kB high:54408kB active_anon:1046912kB inactive_anon:631376kB active_file:0kB inactive_file:0kB unevictable:96428kB writepending:0kB present:3129332kB managed:2621260kB mlocked:96428kB kernel_stack:13184kB pagetables:25516kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.512115] lowmem_reserve[]: 0 0 0 0 0 [ 935.520951] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 935.725145] lowmem_reserve[]: 0 0 0 0 0 [ 935.763435] Node 1 Normal free:53156kB min:53612kB low:67012kB high:80412kB active_anon:10956kB inactive_anon:3619008kB active_file:0kB inactive_file:12kB unevictable:15112kB writepending:0kB present:3932160kB managed:3870192kB mlocked:15112kB kernel_stack:8928kB pagetables:32076kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 936.024132] lowmem_reserve[]: 0 0 0 0 0 [ 936.050386] Node 0 DMA: 6*4kB (UE) 7*8kB (UE) 1*16kB (U) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10400kB [ 936.120858] Node 0 DMA32: 1006*4kB (UE) 362*8kB (UE) 232*16kB (UME) 143*32kB (UME) 133*64kB (UME) 64*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 38056kB [ 936.193248] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 07:51:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) getrandom(&(0x7f0000000140)=""/138, 0x8a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040218, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r3, &(0x7f0000001200)=ANY=[@ANYBLOB="7f454c46067f0020010000000000000002000600fafffffff60000000000000040000000000000006c0200000000000006000000ff7f3800020005000700090051e57464030000000700000000000000ff7fffffffffffffffffffff000000000200000000000000ffff0000000000000600000000000000027f8c7f5c4ebb2d94a6e0eb36a1a0b59b097e7d0fbf562e4894eeecbdc823ed3ede52d63d7ff633ec295653e081465c6dcdf7a5853b73fa45a649d3456db30270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffc99d9be3b2855af9b0c3971c335adff41698bb35ff14827f5011eaf99063c5c4b0bf191dd59f43f7605f59fe530fed476e575f74b909e71c2ed2dbcb7fec294821fe90642ad4b2ea288618b3440656fa340205660e6b21133ade0bdfd60a3bc6cf2c9f987c"], 0x6b9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @mss={0x2, 0x1000000}], 0x2) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x50406}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000140)={0x0, 0x5, 0x5, 0x1, 'syz1\x00', 0x101}) [ 936.270642] Node 1 Normal: 184*4kB (UME) 52*8kB (UME) 84*16kB (UME) 79*32kB (UME) 248*64kB (UME) 105*128kB (UM) 44*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 54304kB [ 936.392178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 936.452005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 936.464453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 936.481464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 936.491906] 9686 total pagecache pages [ 936.501009] 0 pages in swap cache [ 936.506967] Swap cache stats: add 0, delete 0, find 0/0 [ 936.512851] Free swap = 0kB [ 936.525839] Total swap = 0kB [ 936.529645] 1965979 pages RAM [ 936.533101] 0 pages HighMem/MovableOnly [ 936.562812] 339053 pages reserved [ 936.578574] 0 pages cma reserved [ 936.587712] Out of memory: Kill process 31840 (syz-executor.1) score 1008 or sacrifice child [ 936.619747] Killed process 31840 (syz-executor.1) total-vm:74972kB, anon-rss:17976kB, file-rss:44136kB, shmem-rss:0kB [ 936.690953] oom_reaper: reaped process 31840 (syz-executor.1), now anon-rss:18020kB, file-rss:10284kB, shmem-rss:0kB 07:51:46 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:46 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:46 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r1) add_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000600)="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", 0x1000, r1) keyctl$update(0x2, r1, &(0x7f0000000240)="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", 0xfd) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r3) r4 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='batadv_slave_0\x00', r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r4, r2}, &(0x7f00000003c0)=""/271, 0x10f, 0x0) 07:51:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000180)="92e8b9a464f762eada08f18be319af3b94a3aab3b34f6266cee653ad56d61e66cffdb12f", 0x24, 0xfffffffffffffffd) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101200, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0xffffffff}}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r4}}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="200000000000000084000000020000000000e4f42075000000000c00c163ff611a627252d3a9f442eebc714c4656fc1723c7237694bf9acec2bbc6d4ee93ed649d93d96c092bef1ada472d05176ccfbdbd8fc4e6d7f68177bfdaec06aebaebb429f0822319211b63b95417af2b5c569f5fa9e9595a38fb9f1bed8374861cc264cbc43d1a2fb647f16784383ff061d1", @ANYRES32=r5], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={r5, 0x5, 0x20, 0x20, 0x40}, &(0x7f0000000280)=0x18) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000080)='X', 0x1, 0xfffffffffffffffe) socket$phonet(0x23, 0x2, 0x1) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0xf0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000180)=0x6, 0x4) 07:51:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="0d5525f8bcdaacca9dad103f7f2bc8d0b29afac8cde0924171587d16ffffa264624001c144ef04cd8aaf8a3b020fe33710bb27758e10eb7e0bbdc985176ce740642cbe2e8323e160f884f2be738ece1891d059f46c86b70e65196cd17430", 0xfffffe57, r2) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r0, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x460c01, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x1410, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x44844) 07:51:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:48 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000080)='X', 0x1, 0xfffffffffffffffe) socket$phonet(0x23, 0x2, 0x1) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0xf0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000180)=0x6, 0x4) 07:51:48 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x2640, 0x0) readahead(r0, 0x6, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:48 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x2640, 0x0) readahead(r0, 0x6, 0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:51:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000080)='X', 0x1, 0xfffffffffffffffe) socket$phonet(0x23, 0x2, 0x1) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0xf0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000180)=0x6, 0x4) 07:51:50 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:50 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:50 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:50 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 942.398685] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 942.412185] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 942.437898] CPU: 0 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 942.445822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.455172] Call Trace: [ 942.457761] dump_stack+0x13e/0x194 [ 942.461575] dump_header+0x178/0x6d4 [ 942.465296] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 942.470322] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 942.475435] ? ___ratelimit+0x50/0x519 [ 942.479333] oom_kill_process.cold+0x10/0xae3 [ 942.483836] ? lock_downgrade+0x6e0/0x6e0 [ 942.487992] out_of_memory+0x2d5/0x1110 [ 942.491982] ? oom_killer_disable+0x1c0/0x1c0 [ 942.496488] ? mutex_trylock+0x152/0x1a0 [ 942.500556] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 942.505449] ? warn_alloc+0xf0/0xf0 [ 942.509107] __alloc_pages_nodemask+0x5d3/0x700 [ 942.514058] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 942.519086] ? lock_downgrade+0x6e0/0x6e0 [ 942.523263] alloc_pages_current+0xe7/0x1e0 [ 942.527598] __page_cache_alloc+0x245/0x3d0 [ 942.532542] filemap_fault+0xc18/0x1c50 [ 942.536538] ? __lock_page_or_retry+0x8a0/0x8a0 [ 942.541229] ? lock_acquire+0x170/0x3f0 [ 942.545385] ? ext4_filemap_fault+0x7c/0xb0 [ 942.549722] ext4_filemap_fault+0x84/0xb0 [ 942.554310] __do_fault+0xfa/0x380 [ 942.558397] __handle_mm_fault+0x22e9/0x3280 [ 942.563267] ? copy_page_range+0x1d70/0x1d70 [ 942.567879] ? find_held_lock+0x2d/0x110 [ 942.571970] handle_mm_fault+0x288/0x7a0 [ 942.576122] __do_page_fault+0x4bc/0xb40 [ 942.580191] ? vmalloc_fault+0xdf0/0xdf0 [ 942.584295] ? do_page_fault+0x60/0x4f2 [ 942.588275] ? page_fault+0x2f/0x50 [ 942.591903] page_fault+0x45/0x50 [ 942.595364] RIP: 75b22e40:0xe55c2 [ 942.598811] RSP: e55ea:000000000000095b EFLAGS: 0000000d [ 942.704851] Mem-Info: [ 942.714757] active_anon:227943 inactive_anon:1090662 isolated_anon:0 [ 942.714757] active_file:40 inactive_file:4 isolated_file:0 [ 942.714757] unevictable:37768 dirty:4 writeback:0 unstable:0 [ 942.714757] slab_reclaimable:19541 slab_unreclaimable:109248 [ 942.714757] mapped:62579 shmem:4218 pagetables:14534 bounce:0 [ 942.714757] free:24928 free_pcp:30 free_cma:0 [ 942.778104] Node 0 active_anon:900964kB inactive_anon:736992kB active_file:40kB inactive_file:0kB unevictable:139368kB isolated(anon):0kB isolated(file):0kB mapped:244224kB dirty:16kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 942.896654] Node 1 active_anon:10808kB inactive_anon:3625656kB active_file:0kB inactive_file:4kB unevictable:11704kB isolated(anon):0kB isolated(file):0kB mapped:6092kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 942.967898] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5132kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 943.131125] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 943.157996] Node 0 DMA32 free:36156kB min:36272kB low:45340kB high:54408kB active_anon:900952kB inactive_anon:731860kB active_file:160kB inactive_file:24kB unevictable:139464kB writepending:0kB present:3129332kB managed:2621260kB mlocked:139464kB kernel_stack:13440kB pagetables:26100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 943.282800] lowmem_reserve[]: 0 0 0 0 0 [ 943.312590] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 943.445885] lowmem_reserve[]: 0 0 0 0 0 [ 943.464035] Node 1 Normal free:53612kB min:53612kB low:67012kB high:80412kB active_anon:10808kB inactive_anon:3625656kB active_file:0kB inactive_file:4kB unevictable:11704kB writepending:0kB present:3932160kB managed:3870192kB mlocked:11704kB kernel_stack:8832kB pagetables:32008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 943.561107] lowmem_reserve[]: 0 0 0 0 0 [ 943.568006] Node 0 DMA: 4*4kB (UE) 6*8kB (UME) 3*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 943.604010] Node 0 DMA32: 842*4kB (UME) 546*8kB (UME) 55*16kB (UM) 6*32kB (UME) 180*64kB (UME) 62*128kB (UME) 9*256kB (M) 3*512kB (M) 4*1024kB (UM) 0*2048kB 0*4096kB = 36200kB [ 943.678331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 943.723460] Node 1 Normal: 187*4kB (UME) 81*8kB (UME) 107*16kB (UME) 129*32kB (UME) 197*64kB (UME) 106*128kB (UM) 45*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53636kB [ 943.815601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.864036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 943.908112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.942945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 943.999500] 12957 total pagecache pages [ 944.021293] 0 pages in swap cache [ 944.038099] Swap cache stats: add 0, delete 0, find 0/0 [ 944.061362] Free swap = 0kB [ 944.071167] Total swap = 0kB [ 944.088021] 1965979 pages RAM [ 944.100596] 0 pages HighMem/MovableOnly [ 944.120326] 339053 pages reserved [ 944.133779] 0 pages cma reserved [ 944.142939] Out of memory: Kill process 31964 (syz-executor.1) score 1010 or sacrifice child [ 944.194922] Killed process 31965 (syz-executor.1) total-vm:74972kB, anon-rss:18028kB, file-rss:55788kB, shmem-rss:0kB [ 944.274699] oom_reaper: reaped process 31965 (syz-executor.1), now anon-rss:18020kB, file-rss:21168kB, shmem-rss:0kB [ 944.338554] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 944.409937] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 944.433970] CPU: 0 PID: 31968 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0 [ 944.441973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.451507] Call Trace: [ 944.454182] dump_stack+0x13e/0x194 [ 944.457814] dump_header+0x178/0x6d4 [ 944.461529] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 944.466822] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 944.471924] ? ___ratelimit+0x50/0x519 [ 944.475905] oom_kill_process.cold+0x10/0xae3 [ 944.480413] ? lock_downgrade+0x6e0/0x6e0 [ 944.484564] out_of_memory+0x2d5/0x1110 [ 944.488547] ? oom_killer_disable+0x1c0/0x1c0 [ 944.493054] ? mutex_trylock+0x152/0x1a0 [ 944.497128] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 944.501965] ? warn_alloc+0xf0/0xf0 [ 944.505597] __alloc_pages_nodemask+0x5d3/0x700 [ 944.510270] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 944.515267] ? lock_downgrade+0x6e0/0x6e0 [ 944.519409] alloc_pages_current+0xe7/0x1e0 [ 944.523713] __page_cache_alloc+0x245/0x3d0 [ 944.528016] filemap_fault+0xc18/0x1c50 [ 944.531980] ? __lock_page_or_retry+0x8a0/0x8a0 [ 944.536630] ? lock_acquire+0x170/0x3f0 [ 944.540594] ? ext4_filemap_fault+0x7c/0xb0 [ 944.545165] ext4_filemap_fault+0x84/0xb0 [ 944.549331] __do_fault+0xfa/0x380 [ 944.552861] __handle_mm_fault+0x22e9/0x3280 [ 944.557254] ? copy_page_range+0x1d70/0x1d70 [ 944.561664] ? find_held_lock+0x2d/0x110 [ 944.565724] handle_mm_fault+0x288/0x7a0 [ 944.569778] __get_user_pages+0x44d/0x11e0 [ 944.574057] ? follow_page_mask+0x1580/0x1580 [ 944.578545] ? perf_trace_lock+0x109/0x4b0 [ 944.582794] ? lock_acquire+0x170/0x3f0 [ 944.586849] ? __mm_populate+0x1e3/0x2c0 [ 944.590937] populate_vma_page_range+0x17b/0x210 [ 944.595686] __mm_populate+0x195/0x2c0 [ 944.599557] ? populate_vma_page_range+0x210/0x210 [ 944.604587] ? security_capable+0x88/0xb0 [ 944.608733] SyS_mlockall+0x3f5/0x520 [ 944.612553] ? SyS_munlock+0xf0/0xf0 [ 944.616250] do_syscall_64+0x1d5/0x640 [ 944.620137] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 944.625322] RIP: 0033:0x45ca29 [ 944.628505] RSP: 002b:00007f9c04015c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 944.636288] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 944.643551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 944.650819] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 944.658082] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 944.665329] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f9c040166d4 [ 944.676488] Mem-Info: [ 944.679550] active_anon:227939 inactive_anon:1090659 isolated_anon:0 [ 944.679550] active_file:4222 inactive_file:583 isolated_file:0 [ 944.679550] unevictable:28334 dirty:0 writeback:0 unstable:0 [ 944.679550] slab_reclaimable:19549 slab_unreclaimable:108853 [ 944.679550] mapped:57624 shmem:4218 pagetables:14497 bounce:0 [ 944.679550] free:29929 free_pcp:276 free_cma:0 [ 944.724303] Node 0 active_anon:900848kB inactive_anon:736980kB active_file:14932kB inactive_file:2080kB unevictable:104408kB isolated(anon):0kB isolated(file):0kB mapped:227264kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 540672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 944.754973] Node 1 active_anon:10808kB inactive_anon:3625656kB active_file:1500kB inactive_file:852kB unevictable:8928kB isolated(anon):0kB isolated(file):0kB mapped:3332kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 944.787376] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5132kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:51:54 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:54 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 944.857229] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 944.874833] Node 0 DMA32 free:48552kB min:36272kB low:45340kB high:54408kB active_anon:900828kB inactive_anon:731848kB active_file:15016kB inactive_file:8496kB unevictable:104308kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104344kB kernel_stack:13120kB pagetables:25796kB bounce:0kB free_pcp:468kB local_pcp:260kB free_cma:0kB 07:51:54 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 945.091160] lowmem_reserve[]: 0 0 0 0 0 07:51:54 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 945.118460] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 945.244802] lowmem_reserve[]: 0 0 0 0 0 [ 945.260984] Node 1 Normal free:62352kB min:53612kB low:67012kB high:80412kB active_anon:10808kB inactive_anon:3626148kB active_file:208kB inactive_file:316kB unevictable:3608kB writepending:0kB present:3932160kB managed:3870192kB mlocked:3608kB kernel_stack:8832kB pagetables:31996kB bounce:0kB free_pcp:1284kB local_pcp:648kB free_cma:0kB [ 945.410725] lowmem_reserve[]: 0 0 0 0 0 [ 945.424005] Node 0 DMA: 4*4kB (UE) 6*8kB (UME) 3*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 945.505112] Node 0 DMA32: 938*4kB (UME) 236*8kB (UME) 23*16kB (UM) 16*32kB (UME) 265*64kB (UME) 61*128kB (UME) 8*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 37432kB [ 945.570264] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 945.592314] Node 1 Normal: 166*4kB (UME) 143*8kB (UME) 118*16kB (UME) 154*32kB (UE) 176*64kB (UME) 106*128kB (UM) 45*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53680kB [ 945.617231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 945.632219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 945.642572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 945.662043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 945.674025] 10419 total pagecache pages [ 945.681623] 0 pages in swap cache [ 945.724593] Swap cache stats: add 0, delete 0, find 0/0 [ 945.763825] Free swap = 0kB [ 945.777113] Total swap = 0kB [ 945.780177] 1965979 pages RAM [ 945.783292] 0 pages HighMem/MovableOnly [ 945.857457] 339053 pages reserved [ 945.860976] 0 pages cma reserved [ 945.864350] Out of memory: Kill process 31966 (syz-executor.0) score 1007 or sacrifice child [ 945.974408] Killed process 31968 (syz-executor.0) total-vm:74972kB, anon-rss:18028kB, file-rss:40304kB, shmem-rss:0kB [ 946.020148] oom_reaper: reaped process 31968 (syz-executor.0), now anon-rss:18020kB, file-rss:6704kB, shmem-rss:0kB [ 946.858818] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 946.920881] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 946.936189] CPU: 1 PID: 31990 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 946.944089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.953651] Call Trace: [ 946.956254] dump_stack+0x13e/0x194 [ 946.959886] dump_header+0x178/0x6d4 [ 946.963603] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 946.968795] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 946.973902] ? ___ratelimit+0x50/0x519 [ 946.978066] oom_kill_process.cold+0x10/0xae3 [ 946.982573] ? lock_acquire+0x170/0x3f0 [ 946.987276] ? lock_downgrade+0x6e0/0x6e0 [ 946.991438] out_of_memory+0x2d5/0x1110 [ 946.995426] ? oom_killer_disable+0x1c0/0x1c0 [ 946.999923] ? mutex_trylock+0x152/0x1a0 [ 947.004337] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 947.009203] ? warn_alloc+0xf0/0xf0 [ 947.012928] __alloc_pages_nodemask+0x5d3/0x700 [ 947.017604] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 947.023064] ? find_held_lock+0x2d/0x110 [ 947.028100] alloc_pages_vma+0xc2/0x4a0 [ 947.032710] __handle_mm_fault+0x17b6/0x3280 [ 947.037658] ? copy_page_range+0x1d70/0x1d70 [ 947.042081] ? find_held_lock+0x2d/0x110 [ 947.046253] handle_mm_fault+0x288/0x7a0 [ 947.050328] __get_user_pages+0x44d/0x11e0 [ 947.055831] ? follow_page_mask+0x1580/0x1580 [ 947.060332] ? perf_trace_lock+0x109/0x4b0 [ 947.064584] ? lock_acquire+0x170/0x3f0 [ 947.068609] ? __mm_populate+0x1e3/0x2c0 [ 947.072851] populate_vma_page_range+0x17b/0x210 [ 947.077612] __mm_populate+0x195/0x2c0 [ 947.081506] ? populate_vma_page_range+0x210/0x210 [ 947.086788] ? security_capable+0x88/0xb0 [ 947.095211] SyS_mlockall+0x3f5/0x520 [ 947.099108] ? SyS_munlock+0xf0/0xf0 [ 947.102904] do_syscall_64+0x1d5/0x640 [ 947.106799] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 947.112341] RIP: 0033:0x45ca29 [ 947.115525] RSP: 002b:00007fa0858c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 947.123226] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 947.131014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 947.138290] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 947.145647] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 947.152916] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007fa0858ca6d4 [ 947.222523] Mem-Info: [ 947.229435] active_anon:228483 inactive_anon:1090683 isolated_anon:0 [ 947.229435] active_file:16 inactive_file:2 isolated_file:17 [ 947.229435] unevictable:37086 dirty:0 writeback:0 unstable:0 [ 947.229435] slab_reclaimable:19569 slab_unreclaimable:109368 [ 947.229435] mapped:61929 shmem:4218 pagetables:14576 bounce:0 [ 947.229435] free:25033 free_pcp:30 free_cma:0 [ 947.264583] Node 0 active_anon:903116kB inactive_anon:737072kB active_file:60kB inactive_file:16kB unevictable:135092kB isolated(anon):0kB isolated(file):68kB mapped:245328kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 947.295772] Node 1 active_anon:10816kB inactive_anon:3625660kB active_file:4kB inactive_file:0kB unevictable:13252kB isolated(anon):0kB isolated(file):0kB mapped:2388kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 947.326017] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5132kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.384477] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 947.389561] Node 0 DMA32 free:36252kB min:36272kB low:45340kB high:54408kB active_anon:903104kB inactive_anon:731940kB active_file:56kB inactive_file:56kB unevictable:135092kB writepending:0kB present:3129332kB managed:2621260kB mlocked:135092kB kernel_stack:13472kB pagetables:26228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.420588] lowmem_reserve[]: 0 0 0 0 0 [ 947.424648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.450790] lowmem_reserve[]: 0 0 0 0 0 [ 947.454849] Node 1 Normal free:53676kB min:53612kB low:67012kB high:80412kB active_anon:10816kB inactive_anon:3625660kB active_file:4kB inactive_file:4kB unevictable:13252kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13252kB kernel_stack:8864kB pagetables:32028kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.484517] lowmem_reserve[]: 0 0 0 0 0 [ 947.489280] Node 0 DMA: 4*4kB (UE) 6*8kB (UME) 3*16kB (U) 7*32kB (UME) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 947.505599] Node 0 DMA32: 756*4kB (UME) 761*8kB (UM) 11*16kB (UE) 3*32kB (U) 206*64kB (UME) 60*128kB (ME) 8*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 36392kB [ 947.521486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 947.532645] Node 1 Normal: 152*4kB (UE) 144*8kB (UME) 139*16kB (UME) 157*32kB (UME) 168*64kB (UME) 106*128kB (UM) 45*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53552kB [ 947.549579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.558762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.567398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.576671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.585313] 12297 total pagecache pages [ 947.589293] 0 pages in swap cache [ 947.592737] Swap cache stats: add 0, delete 0, find 0/0 [ 947.598147] Free swap = 0kB [ 947.601154] Total swap = 0kB [ 947.604227] 1965979 pages RAM [ 947.607417] 0 pages HighMem/MovableOnly [ 947.611374] 339053 pages reserved [ 947.614861] 0 pages cma reserved [ 947.618227] Out of memory: Kill process 31981 (syz-executor.1) score 1009 or sacrifice child [ 947.627209] Killed process 31981 (syz-executor.1) total-vm:74972kB, anon-rss:17976kB, file-rss:49052kB, shmem-rss:0kB [ 947.696203] oom_reaper: reaped process 31981 (syz-executor.1), now anon-rss:18020kB, file-rss:15408kB, shmem-rss:0kB 07:51:55 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:57 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:51:57 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:51:57 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 949.368015] syz-executor.4 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 949.423241] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 949.440390] CPU: 1 PID: 32019 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 949.448310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.457682] Call Trace: [ 949.460287] dump_stack+0x13e/0x194 [ 949.463941] dump_header+0x178/0x6d4 [ 949.467662] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 949.472694] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 949.477849] ? ___ratelimit+0x50/0x519 [ 949.481756] oom_kill_process.cold+0x10/0xae3 [ 949.487135] ? lock_downgrade+0x6e0/0x6e0 [ 949.491424] out_of_memory+0x2d5/0x1110 [ 949.495454] ? oom_killer_disable+0x1c0/0x1c0 [ 949.499969] ? mutex_trylock+0x152/0x1a0 [ 949.504079] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 949.508949] ? warn_alloc+0xf0/0xf0 [ 949.512601] __alloc_pages_nodemask+0x5d3/0x700 [ 949.517375] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 949.522402] ? check_preemption_disabled+0x35/0x240 [ 949.529523] alloc_pages_vma+0xc2/0x4a0 [ 949.533605] wp_page_copy+0x1f1/0x1300 [ 949.537596] ? follow_pfn+0x200/0x200 [ 949.541696] do_wp_page+0x244/0x11d0 [ 949.545674] ? finish_mkwrite_fault+0x640/0x640 [ 949.551229] __handle_mm_fault+0x1c0e/0x3280 [ 949.555649] ? copy_page_range+0x1d70/0x1d70 [ 949.560169] ? find_held_lock+0x2d/0x110 [ 949.564439] handle_mm_fault+0x288/0x7a0 [ 949.568513] __get_user_pages+0x44d/0x11e0 [ 949.572776] ? follow_page_mask+0x1580/0x1580 [ 949.577282] ? perf_trace_lock+0x109/0x4b0 [ 949.581537] ? lock_acquire+0x170/0x3f0 [ 949.585519] ? __mm_populate+0x1e3/0x2c0 [ 949.589688] populate_vma_page_range+0x17b/0x210 [ 949.594543] __mm_populate+0x195/0x2c0 [ 949.598713] ? populate_vma_page_range+0x210/0x210 [ 949.603914] ? security_capable+0x88/0xb0 [ 949.608424] SyS_mlockall+0x3f5/0x520 [ 949.612532] ? SyS_munlock+0xf0/0xf0 [ 949.616438] do_syscall_64+0x1d5/0x640 [ 949.620534] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 949.625730] RIP: 0033:0x45ca29 [ 949.628921] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 949.637393] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 949.644852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 949.652133] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 949.659413] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 949.666691] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 07:51:59 executing program 5: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 950.059428] Mem-Info: [ 950.062125] active_anon:227960 inactive_anon:1090698 isolated_anon:0 [ 950.062125] active_file:125 inactive_file:174 isolated_file:0 [ 950.062125] unevictable:37294 dirty:34 writeback:0 unstable:0 [ 950.062125] slab_reclaimable:19670 slab_unreclaimable:108595 [ 950.062125] mapped:65252 shmem:4218 pagetables:14624 bounce:0 [ 950.062125] free:25356 free_pcp:223 free_cma:0 [ 950.101557] Node 0 active_anon:900980kB inactive_anon:737100kB active_file:184kB inactive_file:600kB unevictable:136980kB isolated(anon):0kB isolated(file):112kB mapped:255832kB dirty:136kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 950.178655] Node 1 active_anon:10860kB inactive_anon:3625692kB active_file:8kB inactive_file:4kB unevictable:12196kB isolated(anon):0kB isolated(file):0kB mapped:4376kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 950.209793] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5132kB active_file:0kB inactive_file:0kB unevictable:32kB writepending:0kB present:15992kB managed:15908kB mlocked:32kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.251195] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 950.259457] Node 0 DMA32 free:36172kB min:36272kB low:45340kB high:54408kB active_anon:900968kB inactive_anon:731968kB active_file:16kB inactive_file:992kB unevictable:138408kB writepending:64kB present:3129332kB managed:2621260kB mlocked:138408kB kernel_stack:13472kB pagetables:26420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.321772] lowmem_reserve[]: 0 0 0 0 0 [ 950.340515] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.373367] lowmem_reserve[]: 0 0 0 0 0 [ 950.378293] Node 1 Normal free:53512kB min:53612kB low:67012kB high:80412kB active_anon:10860kB inactive_anon:3625692kB active_file:0kB inactive_file:16kB unevictable:12196kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12196kB kernel_stack:8896kB pagetables:32040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.423761] lowmem_reserve[]: 0 0 0 0 0 [ 950.428285] Node 0 DMA: 4*4kB (UE) 7*8kB (UME) 3*16kB (U) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 950.451454] Node 0 DMA32: 682*4kB (UME) 1033*8kB (UE) 86*16kB (U) 7*32kB (UME) 150*64kB (M) 59*128kB (ME) 8*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 35888kB [ 950.473936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 950.492127] Node 1 Normal: 154*4kB (UME) 36*8kB (ME) 108*16kB (UME) 162*32kB (UME) 186*64kB (UME) 106*128kB (UM) 45*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53512kB [ 950.520908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.531296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.557011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.578293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.587153] 15886 total pagecache pages [ 950.591238] 0 pages in swap cache [ 950.602464] Swap cache stats: add 0, delete 0, find 0/0 [ 950.607926] Free swap = 0kB [ 950.610968] Total swap = 0kB [ 950.613987] 1965979 pages RAM [ 950.623846] 0 pages HighMem/MovableOnly [ 950.627914] 339053 pages reserved [ 950.631366] 0 pages cma reserved [ 950.641586] Out of memory: Kill process 31988 (syz-executor.5) score 1010 or sacrifice child [ 950.690933] syz-executor.1 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 950.715946] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 950.721191] CPU: 0 PID: 32005 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0 [ 950.729158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.738514] Call Trace: [ 950.741392] dump_stack+0x13e/0x194 [ 950.745041] dump_header+0x178/0x6d4 [ 950.748749] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 950.753763] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 950.758876] ? ___ratelimit+0x50/0x519 [ 950.763309] oom_kill_process.cold+0x10/0xae3 [ 950.768194] ? lock_downgrade+0x6e0/0x6e0 [ 950.772648] out_of_memory+0x2d5/0x1110 [ 950.776972] ? oom_killer_disable+0x1c0/0x1c0 [ 950.781730] ? mutex_trylock+0x152/0x1a0 [ 950.786253] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 950.791282] ? warn_alloc+0xf0/0xf0 [ 950.794965] __alloc_pages_nodemask+0x5d3/0x700 [ 950.799923] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 950.805144] ? find_held_lock+0x2d/0x110 [ 950.809261] alloc_pages_vma+0xc2/0x4a0 [ 950.813234] __handle_mm_fault+0x17b6/0x3280 [ 950.817674] ? copy_page_range+0x1d70/0x1d70 [ 950.822426] ? find_held_lock+0x2d/0x110 [ 950.826595] handle_mm_fault+0x288/0x7a0 [ 950.830675] __get_user_pages+0x44d/0x11e0 [ 950.834930] ? follow_page_mask+0x1580/0x1580 [ 950.839433] ? perf_trace_lock+0x109/0x4b0 [ 950.844632] ? lock_acquire+0x170/0x3f0 [ 950.848601] ? __mm_populate+0x1e3/0x2c0 [ 950.852773] populate_vma_page_range+0x17b/0x210 [ 950.857651] __mm_populate+0x195/0x2c0 [ 950.861553] ? populate_vma_page_range+0x210/0x210 [ 950.866495] ? security_capable+0x88/0xb0 [ 950.870688] SyS_mlockall+0x3f5/0x520 [ 950.874576] ? SyS_munlock+0xf0/0xf0 [ 950.878281] do_syscall_64+0x1d5/0x640 [ 950.882191] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 950.887724] RIP: 0033:0x45ca29 [ 950.890917] RSP: 002b:00007f4105d72c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 950.898708] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 950.905977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 950.913243] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 950.920513] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 950.927775] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f4105d736d4 [ 951.039167] Mem-Info: [ 951.041813] active_anon:227969 inactive_anon:1090683 isolated_anon:0 [ 951.041813] active_file:16 inactive_file:28 isolated_file:20 [ 951.041813] unevictable:38232 dirty:0 writeback:0 unstable:0 [ 951.041813] slab_reclaimable:19675 slab_unreclaimable:108590 [ 951.041813] mapped:65850 shmem:4218 pagetables:14560 bounce:0 [ 951.041813] free:24912 free_pcp:247 free_cma:0 [ 951.079323] Node 0 active_anon:901008kB inactive_anon:736992kB active_file:4kB inactive_file:60kB unevictable:140668kB isolated(anon):0kB isolated(file):80kB mapped:258888kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 540672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 951.109285] Node 1 active_anon:10856kB inactive_anon:3625656kB active_file:0kB inactive_file:4kB unevictable:12280kB isolated(anon):0kB isolated(file):0kB mapped:4456kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 951.141037] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5132kB active_file:0kB inactive_file:0kB unevictable:32kB writepending:0kB present:15992kB managed:15908kB mlocked:32kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 951.180083] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 951.189025] Node 0 DMA32 free:36512kB min:36272kB low:45340kB high:54408kB active_anon:900996kB inactive_anon:731860kB active_file:44kB inactive_file:80kB unevictable:140540kB writepending:0kB present:3129332kB managed:2621260kB mlocked:140528kB kernel_stack:13280kB pagetables:26172kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 951.256868] lowmem_reserve[]: 0 0 0 0 0 [ 951.280525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 951.414323] lowmem_reserve[]: 0 0 0 0 0 [ 951.418370] Node 1 Normal free:54056kB min:53612kB low:67012kB high:80412kB active_anon:10856kB inactive_anon:3626360kB active_file:80kB inactive_file:472kB unevictable:10068kB writepending:0kB present:3932160kB managed:3870192kB mlocked:10076kB kernel_stack:8896kB pagetables:32036kB bounce:0kB free_pcp:1176kB local_pcp:724kB free_cma:0kB 07:52:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:52:00 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 951.600702] lowmem_reserve[]: 0 0 0 0 0 [ 951.635287] Node 0 DMA: 4*4kB (UE) 7*8kB (UME) 3*16kB (U) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 951.743161] Node 0 DMA32: 899*4kB (UME) 635*8kB (UME) 276*16kB (UME) 48*32kB (UME) 125*64kB (UME) 58*128kB (M) 8*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 36196kB [ 951.833852] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 951.919693] Node 1 Normal: 119*4kB (UME) 74*8kB (UME) 106*16kB (UME) 165*32kB (UME) 191*64kB (UME) 106*128kB (UM) 45*256kB (UM) 15*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 54060kB [ 952.038487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.086674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 952.106906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.127679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 952.244849] 16868 total pagecache pages [ 952.296293] 0 pages in swap cache [ 952.335385] Swap cache stats: add 0, delete 0, find 0/0 [ 952.382765] Free swap = 0kB [ 952.416440] Total swap = 0kB [ 952.443477] 1965979 pages RAM [ 952.473830] 0 pages HighMem/MovableOnly [ 952.513107] 339053 pages reserved [ 952.541767] 0 pages cma reserved [ 952.578437] Out of memory: Kill process 32002 (syz-executor.1) score 1010 or sacrifice child [ 952.649524] Killed process 32005 (syz-executor.1) total-vm:74972kB, anon-rss:18028kB, file-rss:53996kB, shmem-rss:0kB [ 952.823553] oom_reaper: reaped process 32005 (syz-executor.1), now anon-rss:18020kB, file-rss:21740kB, shmem-rss:0kB 07:52:01 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:02 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100ed8b5ea94db079e4f3406100ed83153c6ecd200a59cac0de00f752f72697fdc0f7f480fb15fa48c34a28d151699f007a1b312fe8024a3445df07f77ee83ee2f1cfe90db1660a7339652691e4cb0d04b6da24bafbfd174bc33e05f42752bd5357210370658608296a69ab6a41cd1ed088d5df66a5b24923f9904e2c00000000174056ae958b66f52dfaab2e110958cab9d186f3304f9ee592e3f9467b5b15f712610608d1e348f3931c7b9618f43823946341134ce05d35cd9295f8571124438da4fae76aa13a282ad8b3769face2d9a7ed4ad28736b8ff92f1edc6add1b76f0521b7593c57561d514228c268950c17d5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000340)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="200000000000000084000e00020000000000e4f42075000000000c00c163ff611a627252d3a9f442eebc714c4656fc1723c7237694bf9acec2bbc6d4ee93ed649d93d96c092bef1ada472d05176ccfbdbd8fc4e6d7f68177bfdaec06aebaebb429f0822319211bc10d5417af2b5c569f5fa9e9595a38fb9f1bed8374861cc264cbc43d1a2fb647f16784383ff061d1", @ANYRES32=r4], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20, @broadcast}}, 0x9, 0x3, 0x80, 0x881, 0xc5, 0x1, 0x8}, 0x9c) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e24, 0x6, @remote, 0xe5}}, 0x3ff, 0xa9f0, 0x1, 0x1ff, 0x13, 0x10000, 0x4}, &(0x7f0000000300)=0x9c) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r1, r7}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv0\x00', {0x6}, 0x200}) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r3) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r4, r5}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000180)}) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r6) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r7) keyctl$reject(0x13, r4, 0x8, 0xfffffffffffeffff, r7) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, r1, r8}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:52:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x14, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') 07:52:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:04 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x14, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') 07:52:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x14, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') 07:52:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:06 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 958.372314] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 958.416479] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 958.422615] CPU: 0 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 958.430488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.441194] Call Trace: [ 958.443770] dump_stack+0x13e/0x194 [ 958.447396] dump_header+0x178/0x6d4 [ 958.451088] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 958.456194] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 958.461517] ? ___ratelimit+0x50/0x519 [ 958.465412] oom_kill_process.cold+0x10/0xae3 [ 958.469896] ? lock_downgrade+0x6e0/0x6e0 [ 958.474118] out_of_memory+0x2d5/0x1110 [ 958.478347] ? oom_killer_disable+0x1c0/0x1c0 [ 958.482908] ? mutex_trylock+0x152/0x1a0 [ 958.487056] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 958.491903] ? warn_alloc+0xf0/0xf0 [ 958.495523] __alloc_pages_nodemask+0x5d3/0x700 [ 958.500363] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 958.505388] ? lock_downgrade+0x6e0/0x6e0 [ 958.510069] alloc_pages_current+0xe7/0x1e0 [ 958.514402] __page_cache_alloc+0x245/0x3d0 [ 958.518900] filemap_fault+0xc18/0x1c50 [ 958.522894] ? __lock_page_or_retry+0x8a0/0x8a0 [ 958.528159] ? lock_acquire+0x170/0x3f0 [ 958.533258] ? ext4_filemap_fault+0x7c/0xb0 [ 958.537574] ext4_filemap_fault+0x84/0xb0 [ 958.541711] __do_fault+0xfa/0x380 [ 958.547425] __handle_mm_fault+0x22e9/0x3280 [ 958.551839] ? copy_page_range+0x1d70/0x1d70 [ 958.556252] ? find_held_lock+0x2d/0x110 [ 958.560301] handle_mm_fault+0x288/0x7a0 [ 958.564346] __do_page_fault+0x4bc/0xb40 [ 958.569101] ? vmalloc_fault+0xdf0/0xdf0 [ 958.573309] ? do_page_fault+0x60/0x4f2 [ 958.577633] ? page_fault+0x2f/0x50 [ 958.581240] page_fault+0x45/0x50 [ 958.584692] RIP: 75b22e40:0xe93d7 [ 958.588273] RSP: e9431:0000000000000967 EFLAGS: 0000000d [ 958.613951] Mem-Info: [ 958.622695] active_anon:228366 inactive_anon:1100821 isolated_anon:0 [ 958.622695] active_file:468 inactive_file:902 isolated_file:47 [ 958.622695] unevictable:26971 dirty:0 writeback:0 unstable:0 [ 958.622695] slab_reclaimable:19527 slab_unreclaimable:107726 [ 958.622695] mapped:61711 shmem:4482 pagetables:14612 bounce:0 [ 958.622695] free:25256 free_pcp:145 free_cma:0 07:52:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:08 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:08 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:08 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 958.987270] Node 0 active_anon:902148kB inactive_anon:766884kB active_file:6100kB inactive_file:16308kB unevictable:69584kB isolated(anon):0kB isolated(file):128kB mapped:230352kB dirty:144kB writeback:0kB shmem:16928kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 959.182251] Node 1 active_anon:11204kB inactive_anon:3632100kB active_file:616kB inactive_file:888kB unevictable:6200kB isolated(anon):0kB isolated(file):0kB mapped:900kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 959.277325] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.395480] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 959.400662] Node 0 DMA32 free:36844kB min:36272kB low:45340kB high:54408kB active_anon:902140kB inactive_anon:761640kB active_file:532kB inactive_file:948kB unevictable:102588kB writepending:176kB present:3129332kB managed:2621260kB mlocked:102588kB kernel_stack:13408kB pagetables:26336kB bounce:0kB free_pcp:812kB local_pcp:656kB free_cma:0kB [ 959.432355] lowmem_reserve[]: 0 0 0 0 0 [ 959.439067] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.498298] lowmem_reserve[]: 0 0 0 0 0 [ 959.503395] Node 1 Normal free:53360kB min:53612kB low:67012kB high:80412kB active_anon:11204kB inactive_anon:3632100kB active_file:96kB inactive_file:384kB unevictable:7812kB writepending:0kB present:3932160kB managed:3870192kB mlocked:7812kB kernel_stack:8896kB pagetables:32116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.571625] lowmem_reserve[]: 0 0 0 0 0 [ 959.575841] Node 0 DMA: 4*4kB (UE) 11*8kB (UME) 4*16kB (UM) 7*32kB (UME) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 959.592256] Node 0 DMA32: 817*4kB (UME) 309*8kB (UME) 523*16kB (UM) 49*32kB (UM) 113*64kB (UM) 60*128kB (UME) 8*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 36732kB [ 959.643840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 959.708449] Node 1 Normal: 119*4kB (UME) 90*8kB (UME) 220*16kB (UME) 181*32kB (UME) 148*64kB (UE) 104*128kB (UM) 44*256kB (UM) 16*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53772kB [ 959.814176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.823060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 959.854851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.884080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 959.892771] 10164 total pagecache pages [ 959.922373] 0 pages in swap cache [ 959.925936] Swap cache stats: add 0, delete 0, find 0/0 [ 959.931398] Free swap = 0kB [ 960.002809] Total swap = 0kB [ 960.011794] 1965979 pages RAM [ 960.042149] 0 pages HighMem/MovableOnly [ 960.093967] 339053 pages reserved [ 960.097434] 0 pages cma reserved [ 960.100806] Out of memory: Kill process 32079 (syz-executor.4) score 1009 or sacrifice child [ 960.699770] sshd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 960.723948] sshd cpuset=/ mems_allowed=0-1 [ 960.728215] CPU: 1 PID: 6326 Comm: sshd Not tainted 4.14.180-syzkaller #0 [ 960.735136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.745444] Call Trace: [ 960.748034] dump_stack+0x13e/0x194 [ 960.752006] dump_header+0x178/0x6d4 [ 960.755733] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 960.760923] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 960.766112] ? ___ratelimit+0x50/0x519 [ 960.770093] oom_kill_process.cold+0x10/0xae3 [ 960.774773] ? lock_acquire+0x170/0x3f0 [ 960.778835] ? lock_downgrade+0x6e0/0x6e0 [ 960.783162] out_of_memory+0x2d5/0x1110 [ 960.788194] ? oom_killer_disable+0x1c0/0x1c0 [ 960.792744] ? mutex_trylock+0x152/0x1a0 [ 960.796908] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 960.801774] ? warn_alloc+0xf0/0xf0 [ 960.805418] __alloc_pages_nodemask+0x5d3/0x700 [ 960.815220] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 960.821157] ? lock_downgrade+0x6e0/0x6e0 [ 960.825404] alloc_pages_current+0xe7/0x1e0 [ 960.829734] __page_cache_alloc+0x245/0x3d0 [ 960.834059] filemap_fault+0xc18/0x1c50 [ 960.838053] ? __lock_page_or_retry+0x8a0/0x8a0 [ 960.843422] ? lock_acquire+0x170/0x3f0 [ 960.847397] ? ext4_filemap_fault+0x7c/0xb0 [ 960.851810] ext4_filemap_fault+0x84/0xb0 [ 960.856055] __do_fault+0xfa/0x380 [ 960.859592] __handle_mm_fault+0x22e9/0x3280 [ 960.864099] ? copy_page_range+0x1d70/0x1d70 [ 960.868699] ? find_held_lock+0x2d/0x110 [ 960.873042] handle_mm_fault+0x288/0x7a0 [ 960.877107] __do_page_fault+0x4bc/0xb40 [ 960.881173] ? vmalloc_fault+0xdf0/0xdf0 [ 960.885237] ? do_page_fault+0x60/0x4f2 [ 960.889299] ? page_fault+0x2f/0x50 [ 960.892934] page_fault+0x45/0x50 [ 960.896474] RIP: 90823d7f:0x55889c5fdbe7 [ 960.900522] RSP: 9cd41800:000055889c842a88 EFLAGS: 00000001 [ 960.948113] Mem-Info: [ 960.956681] active_anon:228368 inactive_anon:1099740 isolated_anon:0 [ 960.956681] active_file:28 inactive_file:3 isolated_file:1 [ 960.956681] unevictable:29559 dirty:2 writeback:0 unstable:0 [ 960.956681] slab_reclaimable:19551 slab_unreclaimable:107944 [ 960.956681] mapped:57835 shmem:4218 pagetables:14634 bounce:0 [ 960.956681] free:25017 free_pcp:0 free_cma:0 [ 960.990521] Node 0 active_anon:902236kB inactive_anon:766860kB active_file:112kB inactive_file:8kB unevictable:109016kB isolated(anon):0kB isolated(file):4kB mapped:231108kB dirty:8kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 961.018990] Node 1 active_anon:11236kB inactive_anon:3632100kB active_file:0kB inactive_file:4kB unevictable:9220kB isolated(anon):0kB isolated(file):0kB mapped:232kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 961.046956] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.075505] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 961.080575] Node 0 DMA32 free:36236kB min:36272kB low:45340kB high:54408kB active_anon:902224kB inactive_anon:761708kB active_file:112kB inactive_file:8kB unevictable:108988kB writepending:8kB present:3129332kB managed:2621260kB mlocked:108988kB kernel_stack:13440kB pagetables:26356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.110488] lowmem_reserve[]: 0 0 0 0 0 [ 961.114525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.140745] lowmem_reserve[]: 0 0 0 0 0 [ 961.144961] Node 1 Normal free:53392kB min:53612kB low:67012kB high:80412kB active_anon:11236kB inactive_anon:3632100kB active_file:0kB inactive_file:4kB unevictable:9220kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9220kB kernel_stack:8896kB pagetables:32132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.175253] lowmem_reserve[]: 0 0 0 0 0 [ 961.179267] Node 0 DMA: 4*4kB (UE) 11*8kB (UME) 4*16kB (UM) 7*32kB (UME) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 961.197041] Node 0 DMA32: 781*4kB (UME) 491*8kB (UME) 338*16kB (UM) 65*32kB (UM) 123*64kB (UM) 60*128kB (UME) 8*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 36236kB [ 961.213149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 961.224067] Node 1 Normal: 116*4kB (UME) 113*8kB (UME) 249*16kB (UME) 182*32kB (UE) 149*64kB (UME) 96*128kB (UM) 44*256kB (UM) 16*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53480kB [ 961.240541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.249437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.258558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.267599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.276391] 8150 total pagecache pages [ 961.280486] 0 pages in swap cache [ 961.283987] Swap cache stats: add 0, delete 0, find 0/0 [ 961.289344] Free swap = 0kB [ 961.292344] Total swap = 0kB [ 961.295438] 1965979 pages RAM [ 961.298542] 0 pages HighMem/MovableOnly [ 961.302639] 339053 pages reserved [ 961.307010] 0 pages cma reserved [ 961.310451] Out of memory: Kill process 32112 (syz-executor.3) score 1008 or sacrifice child [ 961.319486] Killed process 32128 (syz-executor.3) total-vm:74972kB, anon-rss:18028kB, file-rss:34816kB, shmem-rss:0kB [ 961.379007] sshd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 961.391418] sshd cpuset=/ mems_allowed=0-1 [ 961.396204] CPU: 1 PID: 6326 Comm: sshd Not tainted 4.14.180-syzkaller #0 [ 961.403288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 961.412631] Call Trace: [ 961.415220] dump_stack+0x13e/0x194 [ 961.418860] dump_header+0x178/0x6d4 [ 961.422602] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 961.427613] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 961.432728] ? ___ratelimit+0x50/0x519 [ 961.436615] oom_kill_process.cold+0x10/0xae3 [ 961.441108] ? lock_acquire+0x170/0x3f0 [ 961.445077] ? lock_downgrade+0x6e0/0x6e0 [ 961.449233] out_of_memory+0x2d5/0x1110 [ 961.453209] ? oom_killer_disable+0x1c0/0x1c0 [ 961.457703] ? mutex_trylock+0x152/0x1a0 [ 961.461766] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 961.466622] ? warn_alloc+0xf0/0xf0 [ 961.470262] __alloc_pages_nodemask+0x5d3/0x700 [ 961.474934] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 961.480037] ? lock_downgrade+0x6e0/0x6e0 [ 961.484193] alloc_pages_current+0xe7/0x1e0 [ 961.488523] __page_cache_alloc+0x245/0x3d0 [ 961.492854] filemap_fault+0xc18/0x1c50 [ 961.496846] ? __lock_page_or_retry+0x8a0/0x8a0 [ 961.501518] ? lock_acquire+0x170/0x3f0 [ 961.505492] ? ext4_filemap_fault+0x7c/0xb0 [ 961.509831] ext4_filemap_fault+0x84/0xb0 [ 961.513981] __do_fault+0xfa/0x380 [ 961.517529] __handle_mm_fault+0x22e9/0x3280 [ 961.521941] ? copy_page_range+0x1d70/0x1d70 [ 961.526355] ? find_held_lock+0x2d/0x110 [ 961.530428] handle_mm_fault+0x288/0x7a0 [ 961.534494] __do_page_fault+0x4bc/0xb40 [ 961.538557] ? vmalloc_fault+0xdf0/0xdf0 [ 961.542620] ? do_page_fault+0x60/0x4f2 [ 961.546597] ? page_fault+0x2f/0x50 [ 961.550221] page_fault+0x45/0x50 [ 961.554194] RIP: 90823d7f:0x55889c5fdbe7 [ 961.558248] RSP: 9cd41800:000055889c842a88 EFLAGS: 00000001 [ 961.564209] Mem-Info: [ 961.572348] active_anon:228368 inactive_anon:1099740 isolated_anon:0 [ 961.572348] active_file:13 inactive_file:19 isolated_file:0 [ 961.572348] unevictable:29559 dirty:2 writeback:0 unstable:0 [ 961.572348] slab_reclaimable:19551 slab_unreclaimable:107922 [ 961.572348] mapped:57835 shmem:4218 pagetables:14597 bounce:0 [ 961.572348] free:25008 free_pcp:88 free_cma:0 [ 961.620017] Node 0 active_anon:902236kB inactive_anon:766860kB active_file:52kB inactive_file:0kB unevictable:109016kB isolated(anon):0kB isolated(file):0kB mapped:231108kB dirty:8kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 961.658007] Node 1 active_anon:11236kB inactive_anon:3632100kB active_file:0kB inactive_file:8kB unevictable:9220kB isolated(anon):0kB isolated(file):0kB mapped:232kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 961.696603] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.730107] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 961.735352] Node 0 DMA32 free:36112kB min:36272kB low:45340kB high:54408kB active_anon:902224kB inactive_anon:761708kB active_file:48kB inactive_file:56kB unevictable:108988kB writepending:8kB present:3129332kB managed:2621260kB mlocked:108988kB kernel_stack:13408kB pagetables:26208kB bounce:0kB free_pcp:352kB local_pcp:0kB free_cma:0kB [ 961.772868] lowmem_reserve[]: 0 0 0 0 0 [ 961.777101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.810243] lowmem_reserve[]: 0 0 0 0 0 [ 961.814380] Node 1 Normal free:53480kB min:53612kB low:67012kB high:80412kB active_anon:11236kB inactive_anon:3632100kB active_file:0kB inactive_file:8kB unevictable:9220kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9220kB kernel_stack:8896kB pagetables:32132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.851638] lowmem_reserve[]: 0 0 0 0 0 [ 961.855728] Node 0 DMA: 4*4kB (UE) 11*8kB (UME) 4*16kB (UM) 7*32kB (UME) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10440kB [ 961.875465] Node 0 DMA32: 750*4kB (UME) 491*8kB (UME) 338*16kB (UM) 66*32kB (UM) 123*64kB (UM) 60*128kB (UME) 8*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 36144kB [ 961.893627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 961.937844] Node 1 Normal: 116*4kB (UME) 113*8kB (UME) 253*16kB (UME) 186*32kB (UE) 149*64kB (UME) 96*128kB (UM) 44*256kB (UM) 16*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53672kB [ 961.963161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.972871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 961.988700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 961.999269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.008398] 8150 total pagecache pages [ 962.012293] 0 pages in swap cache [ 962.016216] Swap cache stats: add 0, delete 0, find 0/0 [ 962.021635] Free swap = 0kB [ 962.026300] Total swap = 0kB [ 962.029344] 1965979 pages RAM [ 962.032430] 0 pages HighMem/MovableOnly [ 962.036515] 339053 pages reserved [ 962.039960] 0 pages cma reserved [ 962.043314] Out of memory: Kill process 32112 (syz-executor.3) score 1008 or sacrifice child [ 962.056891] Killed process 32114 (syz-executor.3) total-vm:74972kB, anon-rss:18028kB, file-rss:40296kB, shmem-rss:0kB [ 962.108222] oom_reaper: reaped process 32114 (syz-executor.3), now anon-rss:18020kB, file-rss:6004kB, shmem-rss:0kB 07:52:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:11 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:52:11 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:11 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:11 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 963.901853] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 964.084571] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 964.128600] CPU: 1 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 964.137120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.150483] Call Trace: [ 964.153086] dump_stack+0x13e/0x194 [ 964.157171] dump_header+0x178/0x6d4 [ 964.160973] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 964.166081] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 964.171282] ? ___ratelimit+0x50/0x519 [ 964.175694] oom_kill_process.cold+0x10/0xae3 [ 964.180191] ? lock_downgrade+0x6e0/0x6e0 [ 964.184351] out_of_memory+0x2d5/0x1110 [ 964.189115] ? oom_killer_disable+0x1c0/0x1c0 [ 964.193608] ? mutex_trylock+0x152/0x1a0 [ 964.197673] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 964.202550] ? warn_alloc+0xf0/0xf0 [ 964.206190] __alloc_pages_nodemask+0x5d3/0x700 [ 964.211435] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 964.216538] ? lock_downgrade+0x6e0/0x6e0 [ 964.220710] alloc_pages_current+0xe7/0x1e0 [ 964.225035] __page_cache_alloc+0x245/0x3d0 [ 964.229356] filemap_fault+0xc18/0x1c50 [ 964.233423] ? __lock_page_or_retry+0x8a0/0x8a0 [ 964.238265] ? lock_acquire+0x170/0x3f0 [ 964.242235] ? ext4_filemap_fault+0x7c/0xb0 [ 964.246563] ext4_filemap_fault+0x84/0xb0 [ 964.250801] __do_fault+0xfa/0x380 [ 964.254350] __handle_mm_fault+0x22e9/0x3280 [ 964.259438] ? copy_page_range+0x1d70/0x1d70 [ 964.264023] ? find_held_lock+0x2d/0x110 [ 964.268104] handle_mm_fault+0x288/0x7a0 [ 964.272459] __do_page_fault+0x4bc/0xb40 [ 964.276528] ? vmalloc_fault+0xdf0/0xdf0 [ 964.280594] ? do_page_fault+0x60/0x4f2 [ 964.284580] ? page_fault+0x2f/0x50 [ 964.288290] page_fault+0x45/0x50 [ 964.291739] RIP: 75b22e40:0xeaf9d [ 964.295191] RSP: eafef:000000000000096a EFLAGS: 0000000d [ 965.274586] Mem-Info: [ 965.295961] active_anon:228007 inactive_anon:1099723 isolated_anon:0 [ 965.295961] active_file:9 inactive_file:0 isolated_file:0 [ 965.295961] unevictable:29355 dirty:0 writeback:0 unstable:0 [ 965.295961] slab_reclaimable:19494 slab_unreclaimable:108658 [ 965.295961] mapped:58475 shmem:4218 pagetables:14612 bounce:0 [ 965.295961] free:24968 free_pcp:11 free_cma:0 [ 965.366973] Node 0 active_anon:901456kB inactive_anon:766788kB active_file:152kB inactive_file:40kB unevictable:105528kB isolated(anon):0kB isolated(file):0kB mapped:233900kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 965.553376] Node 1 active_anon:10572kB inactive_anon:3632104kB active_file:0kB inactive_file:20kB unevictable:11892kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 965.730540] Node 0 DMA free:10500kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:52:15 executing program 3: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:15 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 965.848809] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 965.855177] Node 0 DMA32 free:53372kB min:36272kB low:45340kB high:54408kB active_anon:901444kB inactive_anon:761636kB active_file:3008kB inactive_file:5496kB unevictable:78760kB writepending:0kB present:3129332kB managed:2621260kB mlocked:78684kB kernel_stack:13344kB pagetables:26388kB bounce:0kB free_pcp:884kB local_pcp:544kB free_cma:0kB [ 966.050982] lowmem_reserve[]: 0 0 0 0 0 [ 966.078827] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:52:15 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:15 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 966.283831] lowmem_reserve[]: 0 0 0 0 0 [ 966.352375] Node 1 Normal free:63952kB min:53612kB low:67012kB high:80412kB active_anon:10572kB inactive_anon:3632164kB active_file:0kB inactive_file:4kB unevictable:64kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8832kB pagetables:32000kB bounce:0kB free_pcp:1372kB local_pcp:684kB free_cma:0kB [ 966.620299] lowmem_reserve[]: 0 0 0 0 0 [ 966.646702] Node 0 DMA: 4*4kB (UE) 10*8kB (UE) 6*16kB (UM) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 966.738839] Node 0 DMA32: 934*4kB (UME) 255*8kB (UME) 511*16kB (UM) 68*32kB (UM) 131*64kB (M) 59*128kB (ME) 9*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36416kB [ 966.890577] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 966.972381] Node 1 Normal: 149*4kB (UME) 93*8kB (UME) 319*16kB (UME) 222*32kB (UME) 149*64kB (UME) 78*128kB (UM) 44*256kB (UM) 16*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53548kB [ 967.089946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.165120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.227419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.306432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.345979] 8702 total pagecache pages [ 967.370365] 0 pages in swap cache [ 967.385049] Swap cache stats: add 0, delete 0, find 0/0 [ 967.407739] Free swap = 0kB [ 967.419670] Total swap = 0kB [ 967.429837] 1965979 pages RAM [ 967.439928] 0 pages HighMem/MovableOnly [ 967.502064] 339053 pages reserved [ 967.518470] 0 pages cma reserved [ 967.540073] Out of memory: Kill process 32130 (syz-executor.1) score 1007 or sacrifice child [ 967.688750] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 967.797239] systemd-udevd cpuset=/ mems_allowed=0-1 [ 967.838668] CPU: 1 PID: 32164 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 967.846796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.856676] Call Trace: [ 967.859295] dump_stack+0x13e/0x194 [ 967.863367] dump_header+0x178/0x6d4 [ 967.867538] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 967.872644] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 967.878280] ? ___ratelimit+0x50/0x519 [ 967.882350] oom_kill_process.cold+0x10/0xae3 [ 967.886943] ? lock_downgrade+0x6e0/0x6e0 [ 967.891103] out_of_memory+0x2d5/0x1110 [ 967.896022] ? oom_killer_disable+0x1c0/0x1c0 [ 967.900533] ? mutex_trylock+0x152/0x1a0 [ 967.904608] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 967.909468] ? warn_alloc+0xf0/0xf0 [ 967.913115] __alloc_pages_nodemask+0x5d3/0x700 [ 967.917799] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 967.922968] ? lock_downgrade+0x6e0/0x6e0 [ 967.927140] alloc_pages_current+0xe7/0x1e0 [ 967.931476] __page_cache_alloc+0x245/0x3d0 [ 967.935825] filemap_fault+0xc18/0x1c50 [ 967.939813] ? __lock_page_or_retry+0x8a0/0x8a0 [ 967.944504] ? lock_acquire+0x170/0x3f0 [ 967.948485] ? ext4_filemap_fault+0x7c/0xb0 [ 967.952817] ext4_filemap_fault+0x84/0xb0 [ 967.956967] __do_fault+0xfa/0x380 [ 967.960510] __handle_mm_fault+0x22e9/0x3280 [ 967.964928] ? copy_page_range+0x1d70/0x1d70 [ 967.969348] ? find_held_lock+0x2d/0x110 [ 967.973433] handle_mm_fault+0x288/0x7a0 [ 967.977499] __do_page_fault+0x4bc/0xb40 [ 967.981570] ? vmalloc_fault+0xdf0/0xdf0 [ 967.985655] ? do_page_fault+0x60/0x4f2 [ 967.989812] ? page_fault+0x2f/0x50 [ 967.993447] page_fault+0x45/0x50 [ 967.996901] RIP: 0000:0x7f405869bb58 [ 968.000609] RSP: 5869d8b0:00007f4058033166 EFLAGS: 0000000d [ 968.070864] Mem-Info: [ 968.079160] active_anon:228019 inactive_anon:1099722 isolated_anon:0 [ 968.079160] active_file:16 inactive_file:18 isolated_file:1 [ 968.079160] unevictable:29609 dirty:0 writeback:0 unstable:0 [ 968.079160] slab_reclaimable:19434 slab_unreclaimable:108489 [ 968.079160] mapped:58368 shmem:4218 pagetables:14606 bounce:0 [ 968.079160] free:24817 free_pcp:127 free_cma:0 [ 968.157061] Node 0 active_anon:901444kB inactive_anon:766788kB active_file:16kB inactive_file:80kB unevictable:105084kB isolated(anon):0kB isolated(file):0kB mapped:233472kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 968.197204] Node 1 active_anon:10632kB inactive_anon:3632100kB active_file:28kB inactive_file:16kB unevictable:13352kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 968.235791] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:68kB writepending:0kB present:15992kB managed:15908kB mlocked:68kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 968.273522] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 968.278786] Node 0 DMA32 free:35836kB min:36272kB low:45340kB high:54408kB active_anon:901432kB inactive_anon:761636kB active_file:44kB inactive_file:40kB unevictable:104716kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104716kB kernel_stack:13408kB pagetables:26360kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 968.319817] lowmem_reserve[]: 0 0 0 0 0 [ 968.340902] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 968.392799] lowmem_reserve[]: 0 0 0 0 0 [ 968.400242] Node 1 Normal free:53280kB min:53612kB low:67012kB high:80412kB active_anon:10632kB inactive_anon:3632100kB active_file:24kB inactive_file:20kB unevictable:13352kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13352kB kernel_stack:8832kB pagetables:32016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 968.441928] lowmem_reserve[]: 0 0 0 0 0 [ 968.446536] Node 0 DMA: 4*4kB (UE) 10*8kB (UE) 6*16kB (UM) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 968.472524] Node 0 DMA32: 919*4kB (UME) 286*8kB (UME) 466*16kB (UM) 73*32kB (UM) 131*64kB (M) 59*128kB (ME) 9*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36044kB [ 968.499843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 968.510874] Node 1 Normal: 148*4kB (UME) 98*8kB (UME) 316*16kB (UE) 232*32kB (UE) 148*64kB (UE) 78*128kB (UM) 42*256kB (UM) 16*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 53280kB [ 968.534944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 968.544437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 968.557026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 968.566143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 968.577003] 8668 total pagecache pages [ 968.581502] 0 pages in swap cache [ 968.629485] Swap cache stats: add 0, delete 0, find 0/0 [ 968.638366] Free swap = 0kB [ 968.641395] Total swap = 0kB [ 968.660001] 1965979 pages RAM [ 968.663108] 0 pages HighMem/MovableOnly [ 968.682171] 339053 pages reserved [ 968.687435] 0 pages cma reserved [ 968.690811] Out of memory: Kill process 32150 (syz-executor.3) score 1007 or sacrifice child [ 968.715516] Killed process 32150 (syz-executor.3) total-vm:74840kB, anon-rss:17716kB, file-rss:39212kB, shmem-rss:0kB [ 968.807908] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 968.858609] systemd-udevd cpuset=/ mems_allowed=0-1 [ 968.889866] CPU: 0 PID: 32164 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 968.898647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.908010] Call Trace: [ 968.910604] dump_stack+0x13e/0x194 [ 968.914940] dump_header+0x178/0x6d4 [ 968.918651] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 968.923663] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 968.928764] ? ___ratelimit+0x50/0x519 [ 968.932658] oom_kill_process.cold+0x10/0xae3 [ 968.937424] ? lock_downgrade+0x6e0/0x6e0 [ 968.941586] out_of_memory+0x2d5/0x1110 [ 968.945575] ? oom_killer_disable+0x1c0/0x1c0 [ 968.950075] ? mutex_trylock+0x152/0x1a0 [ 968.954237] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 968.959275] ? warn_alloc+0xf0/0xf0 [ 968.962918] __alloc_pages_nodemask+0x5d3/0x700 [ 968.967593] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 968.972613] ? lock_downgrade+0x6e0/0x6e0 [ 968.976858] alloc_pages_current+0xe7/0x1e0 [ 968.981185] __page_cache_alloc+0x245/0x3d0 [ 968.985509] filemap_fault+0xc18/0x1c50 [ 968.989498] ? __lock_page_or_retry+0x8a0/0x8a0 [ 968.994180] ? lock_acquire+0x170/0x3f0 [ 968.998166] ? ext4_filemap_fault+0x7c/0xb0 [ 969.002952] ext4_filemap_fault+0x84/0xb0 [ 969.007104] __do_fault+0xfa/0x380 [ 969.010645] __handle_mm_fault+0x22e9/0x3280 [ 969.015060] ? copy_page_range+0x1d70/0x1d70 [ 969.019475] ? find_held_lock+0x2d/0x110 [ 969.023553] handle_mm_fault+0x288/0x7a0 [ 969.027621] __do_page_fault+0x4bc/0xb40 [ 969.031694] ? vmalloc_fault+0xdf0/0xdf0 [ 969.035762] ? do_page_fault+0x60/0x4f2 [ 969.039739] ? page_fault+0x2f/0x50 [ 969.043370] page_fault+0x45/0x50 [ 969.046826] RIP: 0000:0x7f405869bb58 [ 969.050538] RSP: 5869d8b0:00007f4058033166 EFLAGS: 0000000d [ 969.054153] Mem-Info: [ 969.064307] active_anon:228018 inactive_anon:1099722 isolated_anon:0 [ 969.064307] active_file:38 inactive_file:108 isolated_file:0 [ 969.064307] unevictable:24449 dirty:0 writeback:0 unstable:0 [ 969.064307] slab_reclaimable:19513 slab_unreclaimable:108242 [ 969.064307] mapped:57498 shmem:4218 pagetables:14575 bounce:0 [ 969.064307] free:29971 free_pcp:255 free_cma:0 07:52:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:52:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) [ 969.240316] Node 0 active_anon:901440kB inactive_anon:777788kB active_file:5700kB inactive_file:5796kB unevictable:77076kB isolated(anon):0kB isolated(file):128kB mapped:231692kB dirty:100kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:52:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x258082, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040218, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_out(r2, 0x2, &(0x7f0000000100)) 07:52:18 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 969.473607] Node 1 active_anon:10632kB inactive_anon:3632100kB active_file:8kB inactive_file:4kB unevictable:3820kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 07:52:18 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 969.655001] Node 0 DMA free:10488kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:12kB writepending:0kB present:15992kB managed:15908kB mlocked:12kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:52:19 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 969.808572] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 969.854865] Node 0 DMA32 free:54040kB min:36272kB low:45340kB high:54408kB active_anon:901932kB inactive_anon:761636kB active_file:7932kB inactive_file:3328kB unevictable:68008kB writepending:0kB present:3129332kB managed:2621260kB mlocked:68364kB kernel_stack:13472kB pagetables:26244kB bounce:0kB free_pcp:368kB local_pcp:212kB free_cma:0kB [ 970.057170] lowmem_reserve[]: 0 0 0 0 0 [ 970.092870] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 970.263324] lowmem_reserve[]: 0 0 0 0 0 [ 970.282728] Node 1 Normal free:53764kB min:53612kB low:67012kB high:80412kB active_anon:10632kB inactive_anon:3632100kB active_file:100kB inactive_file:52kB unevictable:14604kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14604kB kernel_stack:8832kB pagetables:31992kB bounce:0kB free_pcp:496kB local_pcp:124kB free_cma:0kB [ 970.376327] lowmem_reserve[]: 0 0 0 0 0 [ 970.411787] Node 0 DMA: 5*4kB (UME) 11*8kB (UME) 6*16kB (UM) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 970.452787] Node 0 DMA32: 810*4kB (UME) 406*8kB (UME) 510*16kB (UM) 97*32kB (UM) 131*64kB (M) 58*128kB (ME) 8*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36632kB [ 970.471336] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 970.488005] Node 1 Normal: 170*4kB (UME) 47*8kB (ME) 340*16kB (UME) 333*32kB (UME) 152*64kB (UE) 77*128kB (UM) 34*256kB (UM) 14*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 53632kB [ 970.513608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 970.522663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 970.539606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 970.593309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 970.603787] 9215 total pagecache pages [ 970.608209] 0 pages in swap cache [ 970.618426] Swap cache stats: add 0, delete 0, find 0/0 [ 970.624033] Free swap = 0kB [ 970.627085] Total swap = 0kB [ 970.630094] 1965979 pages RAM [ 970.633276] 0 pages HighMem/MovableOnly [ 970.637239] 339053 pages reserved [ 970.640684] 0 pages cma reserved [ 970.644099] Out of memory: Kill process 32151 (syz-executor.0) score 1007 or sacrifice child [ 971.018380] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 971.037312] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 971.047242] CPU: 0 PID: 6335 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 971.054803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.064152] Call Trace: [ 971.066726] dump_stack+0x13e/0x194 [ 971.070341] dump_header+0x178/0x6d4 [ 971.074153] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 971.079165] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 971.084270] ? ___ratelimit+0x50/0x519 [ 971.088146] oom_kill_process.cold+0x10/0xae3 [ 971.092642] ? lock_acquire+0x170/0x3f0 [ 971.096615] ? lock_downgrade+0x6e0/0x6e0 [ 971.101032] out_of_memory+0x2d5/0x1110 [ 971.105010] ? oom_killer_disable+0x1c0/0x1c0 [ 971.109515] ? mutex_trylock+0x152/0x1a0 [ 971.113582] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 971.118430] ? warn_alloc+0xf0/0xf0 [ 971.122056] __alloc_pages_nodemask+0x5d3/0x700 [ 971.126716] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 971.131712] ? lock_downgrade+0x6e0/0x6e0 [ 971.135854] alloc_pages_current+0xe7/0x1e0 [ 971.140157] __page_cache_alloc+0x245/0x3d0 [ 971.147430] filemap_fault+0xc18/0x1c50 [ 971.151393] ? __lock_page_or_retry+0x8a0/0x8a0 [ 971.156044] ? lock_acquire+0x170/0x3f0 [ 971.160131] ? ext4_filemap_fault+0x7c/0xb0 [ 971.164437] ext4_filemap_fault+0x84/0xb0 [ 971.168569] __do_fault+0xfa/0x380 [ 971.172098] __handle_mm_fault+0x22e9/0x3280 [ 971.177373] ? copy_page_range+0x1d70/0x1d70 [ 971.182373] ? find_held_lock+0x2d/0x110 [ 971.186613] handle_mm_fault+0x288/0x7a0 [ 971.190933] __do_page_fault+0x4bc/0xb40 [ 971.194974] ? vmalloc_fault+0xdf0/0xdf0 [ 971.199015] ? do_page_fault+0x60/0x4f2 [ 971.202965] ? page_fault+0x2f/0x50 [ 971.206743] page_fault+0x45/0x50 [ 971.210182] RIP: 0001:0x18b [ 971.213090] RSP: 3b7beb34:000000c4200396e8 EFLAGS: e24d297c73 [ 971.268315] Mem-Info: [ 971.276702] active_anon:228182 inactive_anon:1099722 isolated_anon:0 [ 971.276702] active_file:67 inactive_file:0 isolated_file:25 [ 971.276702] unevictable:29796 dirty:0 writeback:0 unstable:0 [ 971.276702] slab_reclaimable:19558 slab_unreclaimable:107835 [ 971.276702] mapped:59035 shmem:4218 pagetables:14648 bounce:0 [ 971.276702] free:24873 free_pcp:35 free_cma:0 [ 971.315305] Node 0 active_anon:902084kB inactive_anon:766788kB active_file:88kB inactive_file:0kB unevictable:102772kB isolated(anon):0kB isolated(file):0kB mapped:232716kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 971.345111] Node 1 active_anon:10644kB inactive_anon:3632100kB active_file:80kB inactive_file:0kB unevictable:16412kB isolated(anon):0kB isolated(file):100kB mapped:3424kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 971.374010] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.404031] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 971.410142] Node 0 DMA32 free:36020kB min:36272kB low:45340kB high:54408kB active_anon:902072kB inactive_anon:761636kB active_file:0kB inactive_file:60kB unevictable:102716kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102716kB kernel_stack:13568kB pagetables:26520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.445073] lowmem_reserve[]: 0 0 0 0 0 [ 971.449107] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.549997] lowmem_reserve[]: 0 0 0 0 0 [ 971.568405] Node 1 Normal free:53312kB min:53612kB low:67012kB high:80412kB active_anon:10644kB inactive_anon:3632100kB active_file:0kB inactive_file:40kB unevictable:16412kB writepending:0kB present:3932160kB managed:3870192kB mlocked:16412kB kernel_stack:8832kB pagetables:32024kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.786395] lowmem_reserve[]: 0 0 0 0 0 [ 971.790527] Node 0 DMA: 5*4kB (UME) 11*8kB (UME) 6*16kB (UM) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 971.909798] Node 0 DMA32: 699*4kB (UME) 491*8kB (UME) 461*16kB (UM) 97*32kB (UM) 131*64kB (M) 58*128kB (ME) 8*256kB (M) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36084kB [ 971.986505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 972.011896] Node 1 Normal: 155*4kB (UE) 41*8kB (ME) 340*16kB (UME) 333*32kB (UME) 152*64kB (UE) 77*128kB (UM) 34*256kB (UM) 14*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 53524kB [ 972.048314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.070260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 972.092585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.117932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 972.132890] 9315 total pagecache pages [ 972.146081] 0 pages in swap cache [ 972.149547] Swap cache stats: add 0, delete 0, find 0/0 [ 972.158108] Free swap = 0kB [ 972.161300] Total swap = 0kB [ 972.171613] 1965979 pages RAM [ 972.178163] 0 pages HighMem/MovableOnly [ 972.182140] 339053 pages reserved [ 972.193101] 0 pages cma reserved [ 972.210790] Out of memory: Kill process 32182 (syz-executor.1) score 1008 or sacrifice child [ 972.239550] Killed process 32182 (syz-executor.1) total-vm:74972kB, anon-rss:17976kB, file-rss:43432kB, shmem-rss:0kB [ 972.331796] oom_reaper: reaped process 32182 (syz-executor.1), now anon-rss:18020kB, file-rss:12080kB, shmem-rss:0kB [ 972.394943] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 972.486275] in:imklog cpuset=/ mems_allowed=0-1 [ 972.505776] CPU: 1 PID: 5995 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 972.513331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.522718] Call Trace: [ 972.525316] dump_stack+0x13e/0x194 [ 972.528955] dump_header+0x178/0x6d4 [ 972.532673] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 972.537698] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 972.542811] ? ___ratelimit+0x50/0x519 [ 972.546708] oom_kill_process.cold+0x10/0xae3 [ 972.551241] ? lock_downgrade+0x6e0/0x6e0 [ 972.555398] out_of_memory+0x2d5/0x1110 [ 972.559741] ? oom_killer_disable+0x1c0/0x1c0 [ 972.564238] ? mutex_trylock+0x152/0x1a0 [ 972.568740] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 972.573603] ? warn_alloc+0xf0/0xf0 [ 972.577243] __alloc_pages_nodemask+0x5d3/0x700 [ 972.581914] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 972.586938] ? lock_downgrade+0x6e0/0x6e0 [ 972.591100] alloc_pages_current+0xe7/0x1e0 [ 972.595436] __page_cache_alloc+0x245/0x3d0 [ 972.599762] filemap_fault+0xc18/0x1c50 [ 972.603751] ? __lock_page_or_retry+0x8a0/0x8a0 [ 972.608423] ? lock_acquire+0x170/0x3f0 [ 972.612404] ? ext4_filemap_fault+0x7c/0xb0 [ 972.616741] ext4_filemap_fault+0x84/0xb0 [ 972.620895] __do_fault+0xfa/0x380 [ 972.624439] __handle_mm_fault+0x22e9/0x3280 [ 972.628853] ? copy_page_range+0x1d70/0x1d70 [ 972.633272] ? find_held_lock+0x2d/0x110 [ 972.637377] handle_mm_fault+0x288/0x7a0 [ 972.641440] __do_page_fault+0x4bc/0xb40 [ 972.645508] ? vmalloc_fault+0xdf0/0xdf0 [ 972.649659] ? do_page_fault+0x60/0x4f2 [ 972.653633] ? page_fault+0x2f/0x50 [ 972.657357] page_fault+0x45/0x50 [ 972.660817] RIP: ffffffff:0x1f9f [ 972.664178] RSP: d4bdb78b:0000000000000000 EFLAGS: 7fd73a9f5308 [ 972.777713] Mem-Info: 07:52:22 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:22 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 972.819458] active_anon:228157 inactive_anon:1099722 isolated_anon:0 [ 972.819458] active_file:1027 inactive_file:1372 isolated_file:32 [ 972.819458] unevictable:19922 dirty:0 writeback:0 unstable:0 [ 972.819458] slab_reclaimable:19533 slab_unreclaimable:108981 [ 972.819458] mapped:58260 shmem:4218 pagetables:14648 bounce:0 [ 972.819458] free:31112 free_pcp:517 free_cma:0 07:52:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000009c0)=""/240, 0xf0, 0x0) 07:52:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 973.050714] Node 0 active_anon:901396kB inactive_anon:772596kB active_file:3944kB inactive_file:7700kB unevictable:71348kB isolated(anon):0kB isolated(file):0kB mapped:240900kB dirty:148kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:52:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 973.283685] Node 1 active_anon:10612kB inactive_anon:3632156kB active_file:504kB inactive_file:204kB unevictable:2480kB isolated(anon):0kB isolated(file):0kB mapped:400kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 07:52:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) keyctl$update(0x2, 0x0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, 0x0, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:22 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) keyctl$update(0x2, 0x0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, 0x0, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) keyctl$update(0x2, 0x0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, 0x0, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 973.536301] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 973.783012] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 973.828050] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:901380kB inactive_anon:761720kB active_file:1288kB inactive_file:1460kB unevictable:94620kB writepending:148kB present:3129332kB managed:2621260kB mlocked:94660kB kernel_stack:13504kB pagetables:25848kB bounce:0kB free_pcp:864kB local_pcp:392kB free_cma:0kB [ 974.007651] lowmem_reserve[]: 0 0 0 0 0 [ 974.033256] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.089665] lowmem_reserve[]: 0 0 0 0 0 [ 974.096529] Node 1 Normal free:53560kB min:53612kB low:67012kB high:80412kB active_anon:10596kB inactive_anon:3632104kB active_file:0kB inactive_file:0kB unevictable:14652kB writepending:0kB present:3932160kB managed:3870192kB mlocked:14652kB kernel_stack:8864kB pagetables:32112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.131473] lowmem_reserve[]: 0 0 0 0 0 [ 974.137536] Node 0 DMA: 5*4kB (UME) 13*8kB (UME) 5*16kB (U) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 974.159555] Node 0 DMA32: 993*4kB (UME) 524*8kB (UME) 662*16kB (UME) 97*32kB (UM) 136*64kB (M) 52*128kB (ME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37988kB [ 974.185764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 974.197130] Node 1 Normal: 127*4kB (UME) 40*8kB (UME) 230*16kB (UME) 333*32kB (UME) 167*64kB (UME) 85*128kB (UM) 34*256kB (UM) 14*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 53628kB [ 974.213785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.222840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 974.232329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.242248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 974.251455] 10237 total pagecache pages [ 974.255802] 0 pages in swap cache [ 974.259680] Swap cache stats: add 0, delete 0, find 0/0 [ 974.265851] Free swap = 0kB [ 974.269080] Total swap = 0kB [ 974.272289] 1965979 pages RAM [ 974.276847] 0 pages HighMem/MovableOnly [ 974.281033] 339053 pages reserved [ 974.284723] 0 pages cma reserved [ 974.288282] Out of memory: Kill process 32179 (syz-executor.0) score 1007 or sacrifice child [ 974.347479] syz-executor.4 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 974.366649] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 974.372103] CPU: 1 PID: 32220 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 974.380000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.393007] Call Trace: [ 974.395616] dump_stack+0x13e/0x194 [ 974.399338] dump_header+0x178/0x6d4 [ 974.403062] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 974.408118] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 974.413317] ? ___ratelimit+0x50/0x519 [ 974.417205] oom_kill_process.cold+0x10/0xae3 [ 974.421718] ? lock_downgrade+0x6e0/0x6e0 [ 974.425879] out_of_memory+0x2d5/0x1110 [ 974.430207] ? oom_killer_disable+0x1c0/0x1c0 [ 974.434922] ? mutex_trylock+0x152/0x1a0 [ 974.439177] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 974.444120] ? warn_alloc+0xf0/0xf0 [ 974.448108] __alloc_pages_nodemask+0x5d3/0x700 [ 974.452788] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 974.458565] ? find_held_lock+0x2d/0x110 [ 974.464035] alloc_pages_vma+0xc2/0x4a0 [ 974.468026] __handle_mm_fault+0x17b6/0x3280 [ 974.472441] ? copy_page_range+0x1d70/0x1d70 [ 974.476942] ? find_held_lock+0x2d/0x110 [ 974.481020] handle_mm_fault+0x288/0x7a0 [ 974.485086] __get_user_pages+0x44d/0x11e0 [ 974.489806] ? follow_page_mask+0x1580/0x1580 [ 974.494300] ? perf_trace_lock+0x109/0x4b0 [ 974.498538] ? lock_acquire+0x170/0x3f0 [ 974.502888] ? __mm_populate+0x1e3/0x2c0 [ 974.506965] populate_vma_page_range+0x17b/0x210 [ 974.511991] __mm_populate+0x195/0x2c0 [ 974.518934] ? populate_vma_page_range+0x210/0x210 [ 974.523864] ? security_capable+0x88/0xb0 [ 974.529237] SyS_mlockall+0x3f5/0x520 [ 974.533029] ? SyS_munlock+0xf0/0xf0 [ 974.536829] do_syscall_64+0x1d5/0x640 [ 974.541074] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 974.546260] RIP: 0033:0x45ca29 [ 974.549620] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 974.558142] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 974.565512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 974.574869] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 974.582235] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 974.589605] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 [ 974.634616] Mem-Info: [ 974.637811] active_anon:227982 inactive_anon:1099723 isolated_anon:0 [ 974.637811] active_file:38 inactive_file:20 isolated_file:0 [ 974.637811] unevictable:29427 dirty:0 writeback:0 unstable:0 [ 974.637811] slab_reclaimable:19439 slab_unreclaimable:108552 [ 974.637811] mapped:60379 shmem:4218 pagetables:14563 bounce:0 [ 974.637811] free:24973 free_pcp:28 free_cma:0 [ 974.674510] Node 0 active_anon:901332kB inactive_anon:766788kB active_file:152kB inactive_file:140kB unevictable:102044kB isolated(anon):0kB isolated(file):0kB mapped:237820kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 974.705954] Node 1 active_anon:10596kB inactive_anon:3632104kB active_file:0kB inactive_file:40kB unevictable:15664kB isolated(anon):0kB isolated(file):0kB mapped:3696kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 974.889589] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:16kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:68kB writepending:0kB present:15992kB managed:15908kB mlocked:68kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.939795] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 974.945123] Node 0 DMA32 free:36036kB min:36272kB low:45340kB high:54408kB active_anon:901316kB inactive_anon:761636kB active_file:68kB inactive_file:312kB unevictable:102584kB writepending:8kB present:3129332kB managed:2621260kB mlocked:102584kB kernel_stack:13344kB pagetables:26096kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.988719] lowmem_reserve[]: 0 0 0 0 0 [ 975.037304] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 975.063479] lowmem_reserve[]: 0 0 0 0 0 [ 975.067498] Node 1 Normal free:53024kB min:53612kB low:67012kB high:80412kB active_anon:10596kB inactive_anon:3632104kB active_file:4kB inactive_file:0kB unevictable:16272kB writepending:0kB present:3932160kB managed:3870192kB mlocked:16272kB kernel_stack:8864kB pagetables:32112kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 975.098093] lowmem_reserve[]: 0 0 0 0 0 [ 975.102149] Node 0 DMA: 5*4kB (UME) 13*8kB (UME) 5*16kB (U) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 975.117943] Node 0 DMA32: 908*4kB (UME) 621*8kB (UME) 461*16kB (UME) 112*32kB (UM) 136*64kB (M) 52*128kB (ME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35688kB [ 975.133913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 975.151368] Node 1 Normal: 127*4kB (UME) 88*8kB (UME) 271*16kB (UME) 331*32kB (UME) 152*64kB (UE) 80*128kB (UM) 35*256kB (UM) 14*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 53260kB [ 975.174304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 975.189458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 975.209789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 975.230017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 975.241777] 11060 total pagecache pages [ 975.259163] 0 pages in swap cache [ 975.262656] Swap cache stats: add 0, delete 0, find 0/0 [ 975.268826] Free swap = 0kB [ 975.271898] Total swap = 0kB [ 975.288866] 1965979 pages RAM [ 975.292088] 0 pages HighMem/MovableOnly [ 975.296106] 339053 pages reserved [ 975.299546] 0 pages cma reserved [ 975.302892] Out of memory: Kill process 32195 (syz-executor.1) score 1008 or sacrifice child [ 975.315842] Killed process 32195 (syz-executor.1) total-vm:74972kB, anon-rss:17976kB, file-rss:45928kB, shmem-rss:0kB [ 975.360006] oom_reaper: reaped process 32195 (syz-executor.1), now anon-rss:18020kB, file-rss:12348kB, shmem-rss:0kB [ 975.379583] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 975.422249] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 975.465715] CPU: 0 PID: 6335 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 975.473718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.484478] Call Trace: [ 975.487151] dump_stack+0x13e/0x194 [ 975.492239] dump_header+0x178/0x6d4 [ 975.496043] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 975.501040] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 975.506385] ? ___ratelimit+0x50/0x519 [ 975.510262] oom_kill_process.cold+0x10/0xae3 [ 975.515444] ? lock_acquire+0x170/0x3f0 [ 975.519447] ? lock_downgrade+0x6e0/0x6e0 [ 975.523589] out_of_memory+0x2d5/0x1110 [ 975.527556] ? oom_killer_disable+0x1c0/0x1c0 [ 975.532028] ? mutex_trylock+0x152/0x1a0 [ 975.536089] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 975.541452] ? warn_alloc+0xf0/0xf0 [ 975.545159] __alloc_pages_nodemask+0x5d3/0x700 [ 975.550351] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 975.555355] ? lock_downgrade+0x6e0/0x6e0 [ 975.559510] alloc_pages_current+0xe7/0x1e0 [ 975.563825] __page_cache_alloc+0x245/0x3d0 [ 975.568710] filemap_fault+0xc18/0x1c50 [ 975.573104] ? __lock_page_or_retry+0x8a0/0x8a0 [ 975.577779] ? lock_acquire+0x170/0x3f0 [ 975.581750] ? ext4_filemap_fault+0x7c/0xb0 [ 975.586101] ext4_filemap_fault+0x84/0xb0 [ 975.590435] __do_fault+0xfa/0x380 [ 975.593983] __handle_mm_fault+0x22e9/0x3280 [ 975.598637] ? copy_page_range+0x1d70/0x1d70 [ 975.603052] ? find_held_lock+0x2d/0x110 [ 975.607127] handle_mm_fault+0x288/0x7a0 [ 975.611259] __do_page_fault+0x4bc/0xb40 [ 975.615766] ? vmalloc_fault+0xdf0/0xdf0 [ 975.620166] ? do_page_fault+0x60/0x4f2 [ 975.624126] ? page_fault+0x2f/0x50 [ 975.627753] page_fault+0x45/0x50 [ 975.631195] RIP: 0001:0x18b 07:52:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:25 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:25 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 975.634202] RSP: 0001:000000c420039750 EFLAGS: e2fff9da73 [ 976.328800] Mem-Info: [ 976.378679] active_anon:228068 inactive_anon:1099723 isolated_anon:0 [ 976.378679] active_file:1250 inactive_file:2048 isolated_file:19 [ 976.378679] unevictable:21207 dirty:15 writeback:5 unstable:0 [ 976.378679] slab_reclaimable:19391 slab_unreclaimable:109477 [ 976.378679] mapped:59937 shmem:4218 pagetables:14552 bounce:0 [ 976.378679] free:28420 free_pcp:458 free_cma:0 07:52:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0xff, "f4315b9759780db9ef5e03a984f607ff76ea50bf56e57e8e91fe294f563a364a", 0x400, 0x101, 0x7fffffff, 0x0, 0x2}) [ 976.620509] Node 0 active_anon:901652kB inactive_anon:780888kB active_file:6336kB inactive_file:11888kB unevictable:66556kB isolated(anon):0kB isolated(file):204kB mapped:240212kB dirty:56kB writeback:20kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 976.909928] Node 1 active_anon:10620kB inactive_anon:3632104kB active_file:0kB inactive_file:12kB unevictable:3972kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:4kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:52:26 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 977.168208] Node 0 DMA free:10416kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:68kB writepending:0kB present:15992kB managed:15908kB mlocked:68kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.349485] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 977.420248] Node 0 DMA32 free:36204kB min:36272kB low:45340kB high:54408kB active_anon:901536kB inactive_anon:761636kB active_file:1156kB inactive_file:1096kB unevictable:96976kB writepending:220kB present:3129332kB managed:2621260kB mlocked:96976kB kernel_stack:13376kB pagetables:26268kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 977.582081] lowmem_reserve[]: 0 0 0 0 0 [ 977.588532] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.620190] lowmem_reserve[]: 0 0 0 0 0 [ 977.625843] Node 1 Normal free:53080kB min:53612kB low:67012kB high:80412kB active_anon:10628kB inactive_anon:3632104kB active_file:0kB inactive_file:24kB unevictable:12260kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12260kB kernel_stack:8864kB pagetables:32000kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.661395] lowmem_reserve[]: 0 0 0 0 0 [ 977.665980] Node 0 DMA: 4*4kB (UE) 8*8kB (UE) 6*16kB (UM) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10416kB [ 977.688900] Node 0 DMA32: 1181*4kB (UME) 155*8kB (UME) 583*16kB (UME) 149*32kB (UM) 142*64kB (UM) 58*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37340kB [ 977.719527] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 977.907042] Node 1 Normal: 109*4kB (UME) 36*8kB (ME) 115*16kB (UME) 333*32kB (UME) 185*64kB (UME) 84*128kB (UM) 35*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53476kB [ 977.973766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 977.982954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 977.991621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 978.000529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 978.009177] 10632 total pagecache pages [ 978.013232] 0 pages in swap cache [ 978.016683] Swap cache stats: add 0, delete 0, find 0/0 [ 978.022043] Free swap = 0kB [ 978.025150] Total swap = 0kB [ 978.028167] 1965979 pages RAM [ 978.031353] 0 pages HighMem/MovableOnly [ 978.036236] 339053 pages reserved [ 978.039775] 0 pages cma reserved [ 978.043238] Out of memory: Kill process 32196 (syz-executor.0) score 1008 or sacrifice child [ 978.398491] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 978.556570] in:imklog cpuset=/ mems_allowed=0-1 [ 978.561302] CPU: 0 PID: 5995 Comm: in:imklog Not tainted 4.14.180-syzkaller #0 [ 978.568781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.578232] Call Trace: [ 978.580832] dump_stack+0x13e/0x194 [ 978.584484] dump_header+0x178/0x6d4 [ 978.588715] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 978.593727] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 978.599725] ? ___ratelimit+0x50/0x519 [ 978.603621] oom_kill_process.cold+0x10/0xae3 [ 978.608125] ? lock_acquire+0x170/0x3f0 [ 978.612096] ? lock_downgrade+0x6e0/0x6e0 [ 978.616246] out_of_memory+0x2d5/0x1110 [ 978.620240] ? oom_killer_disable+0x1c0/0x1c0 [ 978.625428] ? mutex_trylock+0x152/0x1a0 [ 978.629489] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 978.634449] ? warn_alloc+0xf0/0xf0 [ 978.638096] __alloc_pages_nodemask+0x5d3/0x700 [ 978.642766] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 978.648648] ? lock_downgrade+0x6e0/0x6e0 [ 978.652803] alloc_pages_current+0xe7/0x1e0 [ 978.657129] __page_cache_alloc+0x245/0x3d0 [ 978.661452] filemap_fault+0xc18/0x1c50 [ 978.665435] ? __lock_page_or_retry+0x8a0/0x8a0 [ 978.670101] ? lock_acquire+0x170/0x3f0 [ 978.674076] ? ext4_filemap_fault+0x7c/0xb0 [ 978.678403] ext4_filemap_fault+0x84/0xb0 [ 978.682550] __do_fault+0xfa/0x380 [ 978.686436] __handle_mm_fault+0x22e9/0x3280 [ 978.691190] ? copy_page_range+0x1d70/0x1d70 [ 978.695683] ? find_held_lock+0x2d/0x110 [ 978.699754] handle_mm_fault+0x288/0x7a0 [ 978.703933] __do_page_fault+0x4bc/0xb40 [ 978.707994] ? vmalloc_fault+0xdf0/0xdf0 [ 978.712497] ? do_page_fault+0x60/0x4f2 [ 978.716474] ? page_fault+0x2f/0x50 [ 978.720445] page_fault+0x45/0x50 [ 978.723901] RIP: ffffffff:0xffffffff [ 978.727870] RSP: 0000:00007fd73a9f50a0 EFLAGS: 00000050 [ 978.790920] Mem-Info: [ 978.802365] active_anon:228076 inactive_anon:1099730 isolated_anon:0 [ 978.802365] active_file:18 inactive_file:0 isolated_file:0 [ 978.802365] unevictable:28976 dirty:0 writeback:0 unstable:0 [ 978.802365] slab_reclaimable:19302 slab_unreclaimable:109016 [ 978.802365] mapped:60860 shmem:4218 pagetables:14640 bounce:0 [ 978.802365] free:24956 free_pcp:60 free_cma:0 [ 978.858430] Node 0 active_anon:901536kB inactive_anon:766820kB active_file:52kB inactive_file:4kB unevictable:103068kB isolated(anon):0kB isolated(file):0kB mapped:238164kB dirty:0kB writeback:20kB shmem:16864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 978.890974] Node 1 active_anon:10768kB inactive_anon:3632108kB active_file:0kB inactive_file:44kB unevictable:12840kB isolated(anon):0kB isolated(file):0kB mapped:5284kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 978.924152] Node 0 DMA free:10416kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:68kB writepending:0kB present:15992kB managed:15908kB mlocked:68kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 978.955286] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 978.960354] Node 0 DMA32 free:36008kB min:36272kB low:45340kB high:54408kB active_anon:901524kB inactive_anon:761668kB active_file:64kB inactive_file:64kB unevictable:102904kB writepending:20kB present:3129332kB managed:2621260kB mlocked:102828kB kernel_stack:13440kB pagetables:26332kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 978.994529] lowmem_reserve[]: 0 0 0 0 0 [ 978.998635] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 979.025478] lowmem_reserve[]: 0 0 0 0 0 [ 979.029482] Node 1 Normal free:53476kB min:53612kB low:67012kB high:80412kB active_anon:10768kB inactive_anon:3632108kB active_file:4kB inactive_file:8kB unevictable:12840kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12840kB kernel_stack:8960kB pagetables:32180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 979.059235] lowmem_reserve[]: 0 0 0 0 0 [ 979.063376] Node 0 DMA: 4*4kB (UE) 8*8kB (UE) 6*16kB (UM) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10416kB [ 979.079798] Node 0 DMA32: 944*4kB (UME) 477*8kB (UME) 404*16kB (UME) 147*32kB (UM) 142*64kB (UM) 58*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36040kB [ 979.095232] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 979.108623] Node 1 Normal: 109*4kB (UME) 36*8kB (ME) 115*16kB (UME) 333*32kB (UME) 185*64kB (UME) 84*128kB (UM) 35*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53476kB [ 979.126691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.199247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.223570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 979.232429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 979.258125] 11128 total pagecache pages [ 979.262243] 0 pages in swap cache [ 979.276209] Swap cache stats: add 0, delete 0, find 0/0 [ 979.281591] Free swap = 0kB [ 979.301320] Total swap = 0kB [ 979.310904] 1965979 pages RAM [ 979.330200] 0 pages HighMem/MovableOnly [ 979.337579] 339053 pages reserved [ 979.341034] 0 pages cma reserved [ 979.360660] Out of memory: Kill process 32238 (syz-executor.0) score 1009 or sacrifice child [ 979.372594] Killed process 32240 (syz-executor.0) total-vm:74972kB, anon-rss:18028kB, file-rss:47592kB, shmem-rss:0kB [ 979.512412] oom_reaper: reaped process 32239 (syz-executor.1), now anon-rss:18020kB, file-rss:10672kB, shmem-rss:0kB 07:52:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0xff, "f4315b9759780db9ef5e03a984f607ff76ea50bf56e57e8e91fe294f563a364a", 0x400, 0x101, 0x7fffffff, 0x0, 0x2}) 07:52:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 07:52:29 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:29 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:29 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:30 executing program 5: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0xff, "f4315b9759780db9ef5e03a984f607ff76ea50bf56e57e8e91fe294f563a364a", 0x400, 0x101, 0x7fffffff, 0x0, 0x2}) [ 981.538003] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 981.663351] systemd-udevd cpuset=/ mems_allowed=0-1 [ 981.700681] CPU: 1 PID: 3637 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 981.708421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.718469] Call Trace: [ 981.721064] dump_stack+0x13e/0x194 [ 981.724703] dump_header+0x178/0x6d4 [ 981.728416] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 981.733519] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 981.738650] ? ___ratelimit+0x50/0x519 [ 981.742813] oom_kill_process.cold+0x10/0xae3 [ 981.747340] ? lock_downgrade+0x6e0/0x6e0 [ 981.751669] out_of_memory+0x2d5/0x1110 [ 981.755664] ? oom_killer_disable+0x1c0/0x1c0 [ 981.760161] ? mutex_trylock+0x152/0x1a0 [ 981.764312] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 981.769172] ? warn_alloc+0xf0/0xf0 [ 981.772810] __alloc_pages_nodemask+0x5d3/0x700 [ 981.777482] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 981.782692] ? lock_downgrade+0x6e0/0x6e0 [ 981.787108] alloc_pages_current+0xe7/0x1e0 [ 981.791776] __page_cache_alloc+0x245/0x3d0 [ 981.796191] filemap_fault+0xc18/0x1c50 [ 981.800176] ? __lock_page_or_retry+0x8a0/0x8a0 [ 981.804931] ? lock_acquire+0x170/0x3f0 [ 981.808911] ? ext4_filemap_fault+0x7c/0xb0 [ 981.813240] ext4_filemap_fault+0x84/0xb0 [ 981.817385] __do_fault+0xfa/0x380 [ 981.820960] __handle_mm_fault+0x22e9/0x3280 [ 981.825377] ? copy_page_range+0x1d70/0x1d70 [ 981.829787] ? find_held_lock+0x2d/0x110 [ 981.833954] handle_mm_fault+0x288/0x7a0 [ 981.838055] __do_page_fault+0x4bc/0xb40 [ 981.842148] ? vmalloc_fault+0xdf0/0xdf0 [ 981.846212] ? do_page_fault+0x60/0x4f2 [ 981.850192] ? page_fault+0x2f/0x50 [ 981.853818] page_fault+0x45/0x50 [ 981.858348] RIP: 109bca60:0x561d10a80ce0 [ 981.862491] RSP: 10a6f9b0:0000561d10898379 EFLAGS: 00000000 [ 982.172850] Mem-Info: [ 982.250486] active_anon:228062 inactive_anon:1101792 isolated_anon:0 [ 982.250486] active_file:29 inactive_file:1 isolated_file:0 [ 982.250486] unevictable:26745 dirty:0 writeback:0 unstable:0 [ 982.250486] slab_reclaimable:19320 slab_unreclaimable:109072 [ 982.250486] mapped:61372 shmem:4218 pagetables:14643 bounce:0 [ 982.250486] free:24995 free_pcp:0 free_cma:0 [ 982.297190] Node 0 active_anon:901636kB inactive_anon:773408kB active_file:112kB inactive_file:100kB unevictable:97120kB isolated(anon):0kB isolated(file):100kB mapped:241088kB dirty:0kB writeback:0kB shmem:16868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 982.327260] Node 1 active_anon:10612kB inactive_anon:3633760kB active_file:4kB inactive_file:4kB unevictable:9860kB isolated(anon):0kB isolated(file):0kB mapped:4400kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 982.411368] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.535623] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 982.571803] Node 0 DMA32 free:35944kB min:36272kB low:45340kB high:54408kB active_anon:901624kB inactive_anon:768256kB active_file:128kB inactive_file:60kB unevictable:96564kB writepending:0kB present:3129332kB managed:2621260kB mlocked:96564kB kernel_stack:13568kB pagetables:26416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.806827] lowmem_reserve[]: 0 0 0 0 0 [ 982.810952] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.943564] lowmem_reserve[]: 0 0 0 0 0 [ 982.947687] Node 1 Normal free:53716kB min:53612kB low:67012kB high:80412kB active_anon:10612kB inactive_anon:3633760kB active_file:0kB inactive_file:16kB unevictable:9860kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9860kB kernel_stack:8928kB pagetables:32108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.977524] lowmem_reserve[]: 0 0 0 0 0 [ 982.981965] Node 0 DMA: 5*4kB (UME) 9*8kB (UME) 7*16kB (UM) 6*32kB (UE) 5*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 982.997981] Node 0 DMA32: 777*4kB (UME) 143*8kB (UME) 589*16kB (UME) 169*32kB (UM) 149*64kB (UM) 60*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37068kB [ 983.017170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 983.030325] Node 1 Normal: 117*4kB (UME) 39*8kB (ME) 47*16kB (UME) 328*32kB (UME) 195*64kB (UME) 88*128kB (UM) 36*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53692kB [ 983.047420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.056481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.066885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.075937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.084633] 11624 total pagecache pages [ 983.088648] 0 pages in swap cache [ 983.092108] Swap cache stats: add 0, delete 0, find 0/0 [ 983.097680] Free swap = 0kB [ 983.100786] Total swap = 0kB [ 983.103912] 1965979 pages RAM [ 983.107043] 0 pages HighMem/MovableOnly [ 983.111015] 339053 pages reserved [ 983.114548] 0 pages cma reserved [ 983.117914] Out of memory: Kill process 32266 (syz-executor.0) score 1008 or sacrifice child 07:52:32 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 07:52:32 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:32 executing program 5: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:32 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:32 executing program 5: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:33 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 985.268401] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 985.301688] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 985.313012] CPU: 1 PID: 6362 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 985.321088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.330528] Call Trace: [ 985.333130] dump_stack+0x13e/0x194 [ 985.336792] dump_header+0x178/0x6d4 [ 985.340505] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 985.345528] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 985.350636] ? ___ratelimit+0x50/0x519 [ 985.354537] oom_kill_process.cold+0x10/0xae3 [ 985.359063] ? lock_acquire+0x170/0x3f0 [ 985.363041] ? lock_downgrade+0x6e0/0x6e0 [ 985.367196] out_of_memory+0x2d5/0x1110 [ 985.371178] ? oom_killer_disable+0x1c0/0x1c0 [ 985.375807] ? mutex_trylock+0x152/0x1a0 [ 985.379871] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 985.384727] ? warn_alloc+0xf0/0xf0 [ 985.388385] __alloc_pages_nodemask+0x5d3/0x700 [ 985.393056] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 985.398244] ? lock_downgrade+0x6e0/0x6e0 [ 985.402405] alloc_pages_current+0xe7/0x1e0 [ 985.406732] __page_cache_alloc+0x245/0x3d0 [ 985.411059] filemap_fault+0xc18/0x1c50 [ 985.415044] ? __lock_page_or_retry+0x8a0/0x8a0 [ 985.419712] ? lock_acquire+0x170/0x3f0 [ 985.423684] ? ext4_filemap_fault+0x7c/0xb0 [ 985.428012] ext4_filemap_fault+0x84/0xb0 [ 985.432260] __do_fault+0xfa/0x380 [ 985.435797] __handle_mm_fault+0x22e9/0x3280 [ 985.440208] ? copy_page_range+0x1d70/0x1d70 [ 985.444617] ? find_held_lock+0x2d/0x110 [ 985.448863] handle_mm_fault+0x288/0x7a0 [ 985.452924] __do_page_fault+0x4bc/0xb40 [ 985.456987] ? vmalloc_fault+0xdf0/0xdf0 [ 985.461043] ? do_page_fault+0x60/0x4f2 [ 985.465014] ? page_fault+0x2f/0x50 [ 985.468639] page_fault+0x45/0x50 [ 985.472087] RIP: 2ed26dc0:0xf0228 [ 985.475534] RSP: f027f:0000000000000d43 EFLAGS: 00000005 [ 985.501541] Mem-Info: [ 985.522045] active_anon:228123 inactive_anon:1099722 isolated_anon:0 [ 985.522045] active_file:30 inactive_file:0 isolated_file:0 [ 985.522045] unevictable:28732 dirty:0 writeback:0 unstable:0 [ 985.522045] slab_reclaimable:19396 slab_unreclaimable:109132 [ 985.522045] mapped:59216 shmem:4218 pagetables:14632 bounce:0 [ 985.522045] free:24966 free_pcp:0 free_cma:0 [ 985.759624] Node 0 active_anon:901788kB inactive_anon:766788kB active_file:100kB inactive_file:32kB unevictable:102684kB isolated(anon):0kB isolated(file):0kB mapped:233964kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 985.998237] Node 1 active_anon:10704kB inactive_anon:3632100kB active_file:4kB inactive_file:4kB unevictable:12348kB isolated(anon):0kB isolated(file):0kB mapped:2892kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 986.264067] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:16kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:80kB writepending:0kB present:15992kB managed:15908kB mlocked:80kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 986.495829] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 986.501006] Node 0 DMA32 free:36252kB min:36272kB low:45340kB high:54408kB active_anon:901772kB inactive_anon:761636kB active_file:104kB inactive_file:16kB unevictable:102604kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102604kB kernel_stack:13408kB pagetables:26372kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 986.785150] lowmem_reserve[]: 0 0 0 0 0 [ 986.789537] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.065570] lowmem_reserve[]: 0 0 0 0 0 [ 987.069720] Node 1 Normal free:53556kB min:53612kB low:67012kB high:80412kB active_anon:10704kB inactive_anon:3632100kB active_file:0kB inactive_file:4kB unevictable:12348kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12348kB kernel_stack:8832kB pagetables:32108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 07:52:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 987.244438] lowmem_reserve[]: 0 0 0 0 0 07:52:36 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:36 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 987.272823] Node 0 DMA: 6*4kB (UME) 7*8kB (UME) 7*16kB (UM) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10464kB [ 987.387140] Node 0 DMA32: 2161*4kB (UME) 838*8kB (UME) 558*16kB (UME) 175*32kB (UME) 154*64kB (UM) 60*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48180kB [ 987.467189] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 987.521095] Node 1 Normal: 258*4kB (UME) 291*8kB (UME) 176*16kB (UME) 404*32kB (UME) 182*64kB (UME) 98*128kB (UM) 39*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 61984kB 07:52:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:36 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 987.586324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.634177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 987.680706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.720671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 987.768764] 10190 total pagecache pages [ 987.790990] 0 pages in swap cache [ 987.810800] Swap cache stats: add 0, delete 0, find 0/0 [ 987.851314] Free swap = 0kB [ 987.873948] Total swap = 0kB [ 987.891886] 1965979 pages RAM [ 987.918500] 0 pages HighMem/MovableOnly [ 987.942018] 339053 pages reserved [ 987.961298] 0 pages cma reserved [ 987.975955] Out of memory: Kill process 32296 (syz-executor.1) score 1009 or sacrifice child [ 988.276735] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 988.381418] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 988.402053] CPU: 0 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 988.409880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.419324] Call Trace: [ 988.421917] dump_stack+0x13e/0x194 [ 988.425589] dump_header+0x178/0x6d4 [ 988.429299] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 988.434316] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 988.439427] ? ___ratelimit+0x50/0x519 [ 988.443321] oom_kill_process.cold+0x10/0xae3 [ 988.447823] ? lock_downgrade+0x6e0/0x6e0 [ 988.451982] out_of_memory+0x2d5/0x1110 [ 988.455969] ? oom_killer_disable+0x1c0/0x1c0 [ 988.460465] ? mutex_trylock+0x152/0x1a0 [ 988.464534] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 988.469397] ? warn_alloc+0xf0/0xf0 [ 988.473129] __alloc_pages_nodemask+0x5d3/0x700 [ 988.477797] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 988.482898] ? lock_downgrade+0x6e0/0x6e0 [ 988.487229] alloc_pages_current+0xe7/0x1e0 [ 988.491654] __page_cache_alloc+0x245/0x3d0 [ 988.496072] filemap_fault+0xc18/0x1c50 [ 988.500087] ? __lock_page_or_retry+0x8a0/0x8a0 [ 988.506156] ? lock_acquire+0x170/0x3f0 [ 988.510130] ? ext4_filemap_fault+0x7c/0xb0 [ 988.514457] ext4_filemap_fault+0x84/0xb0 [ 988.519219] __do_fault+0xfa/0x380 [ 988.522756] __handle_mm_fault+0x22e9/0x3280 [ 988.527250] ? copy_page_range+0x1d70/0x1d70 [ 988.531658] ? find_held_lock+0x2d/0x110 [ 988.535729] handle_mm_fault+0x288/0x7a0 [ 988.539787] __do_page_fault+0x4bc/0xb40 [ 988.544017] ? vmalloc_fault+0xdf0/0xdf0 [ 988.548186] ? do_page_fault+0x60/0x4f2 [ 988.552241] ? page_fault+0x2f/0x50 [ 988.555861] page_fault+0x45/0x50 [ 988.559402] RIP: 75b22e40:0xf10e2 [ 988.562842] RSP: f1133:000000000000097c EFLAGS: 0000000d [ 988.783763] Mem-Info: [ 988.845651] active_anon:228006 inactive_anon:1099738 isolated_anon:0 [ 988.845651] active_file:14 inactive_file:21 isolated_file:0 [ 988.845651] unevictable:29188 dirty:22 writeback:25 unstable:0 [ 988.845651] slab_reclaimable:19367 slab_unreclaimable:108830 [ 988.845651] mapped:58808 shmem:4218 pagetables:14600 bounce:0 [ 988.845651] free:24888 free_pcp:0 free_cma:0 [ 988.992973] Node 0 active_anon:901384kB inactive_anon:766852kB active_file:108kB inactive_file:40kB unevictable:104160kB isolated(anon):0kB isolated(file):0kB mapped:232548kB dirty:84kB writeback:92kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 989.214564] Node 1 active_anon:10640kB inactive_anon:3632100kB active_file:0kB inactive_file:12kB unevictable:12644kB isolated(anon):0kB isolated(file):0kB mapped:2808kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 989.415548] Node 0 DMA free:10448kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:68kB writepending:0kB present:15992kB managed:15908kB mlocked:68kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 989.589531] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 989.638404] Node 0 DMA32 free:36268kB min:36272kB low:45340kB high:54408kB active_anon:901440kB inactive_anon:761700kB active_file:104kB inactive_file:0kB unevictable:104092kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104092kB kernel_stack:13472kB pagetables:26256kB bounce:0kB free_pcp:120kB local_pcp:68kB free_cma:0kB [ 989.668718] lowmem_reserve[]: 0 0 0 0 0 [ 989.672761] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 989.698616] lowmem_reserve[]: 0 0 0 0 0 [ 989.702671] Node 1 Normal free:53548kB min:53612kB low:67012kB high:80412kB active_anon:10640kB inactive_anon:3632100kB active_file:68kB inactive_file:0kB unevictable:12644kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12644kB kernel_stack:8832kB pagetables:32116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 989.733661] lowmem_reserve[]: 0 0 0 0 0 [ 989.737666] Node 0 DMA: 6*4kB (UME) 7*8kB (UME) 6*16kB (U) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10448kB [ 989.758632] Node 0 DMA32: 676*4kB (UME) 243*8kB (UME) 382*16kB (UME) 197*32kB (UME) 158*64kB (UM) 63*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36264kB [ 989.792732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 989.809734] Node 1 Normal: 117*4kB (UE) 173*8kB (UME) 21*16kB (UME) 331*32kB (UME) 153*64kB (UME) 96*128kB (UM) 39*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53548kB [ 989.838108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 989.852412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 989.872075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 989.970605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 990.039449] 9083 total pagecache pages [ 990.081007] 0 pages in swap cache [ 990.105732] Swap cache stats: add 0, delete 0, find 0/0 [ 990.164870] Free swap = 0kB [ 990.181322] Total swap = 0kB [ 990.211102] 1965979 pages RAM [ 990.231234] 0 pages HighMem/MovableOnly [ 990.255928] 339053 pages reserved [ 990.280594] 0 pages cma reserved [ 990.309242] Out of memory: Kill process 32329 (syz-executor.4) score 1008 or sacrifice child [ 990.390794] Killed process 32330 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:44012kB, shmem-rss:0kB [ 990.556417] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 990.632859] systemd-udevd cpuset=/ mems_allowed=0-1 [ 990.648148] CPU: 1 PID: 3637 Comm: systemd-udevd Not tainted 4.14.180-syzkaller #0 [ 990.656837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.666194] Call Trace: [ 990.668780] dump_stack+0x13e/0x194 [ 990.672409] dump_header+0x178/0x6d4 [ 990.676213] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 990.681318] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 990.686434] ? ___ratelimit+0x50/0x519 [ 990.690330] oom_kill_process.cold+0x10/0xae3 [ 990.695096] ? lock_downgrade+0x6e0/0x6e0 [ 990.699249] out_of_memory+0x2d5/0x1110 [ 990.703229] ? oom_killer_disable+0x1c0/0x1c0 [ 990.707725] ? mutex_trylock+0x152/0x1a0 [ 990.711793] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 990.716667] ? warn_alloc+0xf0/0xf0 [ 990.720305] __alloc_pages_nodemask+0x5d3/0x700 [ 990.724974] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 990.729989] ? lock_downgrade+0x6e0/0x6e0 [ 990.734145] alloc_pages_current+0xe7/0x1e0 [ 990.738897] __page_cache_alloc+0x245/0x3d0 [ 990.743220] filemap_fault+0xc18/0x1c50 [ 990.747208] ? __lock_page_or_retry+0x8a0/0x8a0 [ 990.752239] ? lock_acquire+0x170/0x3f0 [ 990.756220] ? ext4_filemap_fault+0x7c/0xb0 [ 990.760642] ext4_filemap_fault+0x84/0xb0 [ 990.764791] __do_fault+0xfa/0x380 [ 990.768854] __handle_mm_fault+0x22e9/0x3280 [ 990.773473] ? copy_page_range+0x1d70/0x1d70 [ 990.777890] ? find_held_lock+0x2d/0x110 07:52:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3", 0xb4) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 990.781964] handle_mm_fault+0x288/0x7a0 [ 990.786108] __do_page_fault+0x4bc/0xb40 [ 990.790186] ? vmalloc_fault+0xdf0/0xdf0 [ 990.796432] ? do_page_fault+0x60/0x4f2 [ 990.800407] ? page_fault+0x2f/0x50 [ 990.804035] page_fault+0x45/0x50 [ 990.807488] RIP: ffffff9c:0x7ffd54fefe90 07:52:40 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:40 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r7}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 990.811545] RSP: 10a76be0:0000000000000064 EFLAGS: 561d10a76cb0 [ 991.121670] (unnamed net_device) (uninitialized): Device ip6tnl0 is not bonding slave 07:52:40 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 991.199427] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6tnl0) 07:52:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r7}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 991.486318] (unnamed net_device) (uninitialized): Device ip6tnl0 is not bonding slave [ 991.517049] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6tnl0) [ 991.639093] Mem-Info: [ 991.646687] active_anon:228041 inactive_anon:1099723 isolated_anon:0 [ 991.646687] active_file:28 inactive_file:39 isolated_file:0 [ 991.646687] unevictable:27628 dirty:10 writeback:0 unstable:0 [ 991.646687] slab_reclaimable:19324 slab_unreclaimable:109474 [ 991.646687] mapped:58412 shmem:4218 pagetables:14628 bounce:0 [ 991.646687] free:25533 free_pcp:225 free_cma:0 [ 991.850476] Node 0 active_anon:901460kB inactive_anon:766792kB active_file:68kB inactive_file:0kB unevictable:101340kB isolated(anon):0kB isolated(file):0kB mapped:234244kB dirty:40kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 991.983671] Node 1 active_anon:10640kB inactive_anon:3632100kB active_file:4kB inactive_file:4kB unevictable:12360kB isolated(anon):0kB isolated(file):0kB mapped:588kB dirty:12kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 992.047615] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:20kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:76kB writepending:0kB present:15992kB managed:15908kB mlocked:76kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.081018] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 992.087175] Node 0 DMA32 free:37060kB min:36272kB low:45340kB high:54408kB active_anon:901348kB inactive_anon:761724kB active_file:28kB inactive_file:28kB unevictable:101364kB writepending:4kB present:3129332kB managed:2621260kB mlocked:101364kB kernel_stack:13344kB pagetables:26184kB bounce:0kB free_pcp:296kB local_pcp:120kB free_cma:0kB [ 992.124284] lowmem_reserve[]: 0 0 0 0 0 [ 992.128468] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.160287] lowmem_reserve[]: 0 0 0 0 0 [ 992.165162] Node 1 Normal free:53444kB min:53612kB low:67012kB high:80412kB active_anon:10640kB inactive_anon:3632100kB active_file:4kB inactive_file:4kB unevictable:12360kB writepending:12kB present:3932160kB managed:3870192kB mlocked:12360kB kernel_stack:8960kB pagetables:32144kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 992.201942] lowmem_reserve[]: 0 0 0 0 0 [ 992.206111] Node 0 DMA: 4*4kB (UE) 6*8kB (UE) 6*16kB (U) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 992.228731] Node 0 DMA32: 598*4kB (UE) 640*8kB (UE) 373*16kB (UME) 150*32kB (UME) 165*64kB (UM) 63*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37928kB [ 992.251380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 992.267209] Node 1 Normal: 93*4kB (UE) 216*8kB (UE) 33*16kB (UME) 327*32kB (UE) 153*64kB (UME) 91*128kB (UM) 41*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53732kB [ 992.288846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 992.298951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 992.307961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 992.318806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 992.327845] 9093 total pagecache pages [ 992.336341] 0 pages in swap cache [ 992.340019] Swap cache stats: add 0, delete 0, find 0/0 [ 992.346506] Free swap = 0kB [ 992.349722] Total swap = 0kB [ 992.357478] 1965979 pages RAM [ 992.360767] 0 pages HighMem/MovableOnly [ 992.369843] 339053 pages reserved [ 992.389227] 0 pages cma reserved [ 992.393032] Out of memory: Kill process 32325 (syz-executor.0) score 1008 or sacrifice child [ 992.861218] syz-executor.5 invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=1000 [ 992.964710] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 993.008988] CPU: 1 PID: 32364 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 993.017075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.026433] Call Trace: [ 993.029143] dump_stack+0x13e/0x194 [ 993.032786] dump_header+0x178/0x6d4 [ 993.036501] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 993.041525] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 993.046714] ? ___ratelimit+0x50/0x519 [ 993.050612] oom_kill_process.cold+0x10/0xae3 [ 993.055125] ? lock_downgrade+0x6e0/0x6e0 [ 993.059283] out_of_memory+0x2d5/0x1110 [ 993.063262] ? oom_killer_disable+0x1c0/0x1c0 [ 993.067754] ? mutex_trylock+0x152/0x1a0 [ 993.071815] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 993.076671] ? warn_alloc+0xf0/0xf0 [ 993.080663] __alloc_pages_nodemask+0x5d3/0x700 [ 993.085331] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 993.090351] ? find_get_entry+0x21d/0x690 [ 993.094511] ? lock_downgrade+0x6e0/0x6e0 [ 993.098661] alloc_pages_current+0xe7/0x1e0 [ 993.103248] __page_cache_alloc+0x245/0x3d0 [ 993.107575] pagecache_get_page+0x174/0xa10 [ 993.111899] grab_cache_page_write_begin+0x6c/0xa0 [ 993.116834] ext4_da_write_begin+0x241/0xe60 [ 993.121245] ? ext4_write_begin+0x1240/0x1240 [ 993.125738] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 993.131217] generic_perform_write+0x1c9/0x420 [ 993.135802] ? __mnt_drop_write+0x40/0x70 [ 993.140014] ? page_endio+0x540/0x540 [ 993.143812] ? current_time+0xb0/0xb0 [ 993.147609] ? ext4_file_write_iter+0x1d5/0xdc0 [ 993.152278] __generic_file_write_iter+0x227/0x590 [ 993.157213] ext4_file_write_iter+0x281/0xdc0 [ 993.161792] ? __lock_acquire+0x5f7/0x4620 [ 993.166024] ? ext4_file_mmap+0x2b0/0x2b0 [ 993.172625] ? trace_hardirqs_on+0x10/0x10 [ 993.177724] ? iov_iter_init+0xa6/0x1c0 [ 993.181697] __vfs_write+0x44e/0x630 [ 993.185408] ? save_trace+0x290/0x290 [ 993.190243] ? kernel_read+0x110/0x110 [ 993.194154] ? save_trace+0x290/0x290 [ 993.198136] ? do_acct_process+0xc41/0xf60 [ 993.202369] __kernel_write+0xf5/0x330 [ 993.206960] do_acct_process+0xb49/0xf60 [ 993.211113] ? acct_put+0x40/0x40 [ 993.214569] ? acct_process+0x179/0x422 [ 993.218553] acct_process+0x38a/0x422 [ 993.222353] do_exit+0x1712/0x2b00 [ 993.225896] ? mm_update_next_owner+0x5b0/0x5b0 [ 993.230560] ? get_signal+0x31c/0x1ca0 [ 993.234463] ? lock_downgrade+0x6e0/0x6e0 [ 993.238627] do_group_exit+0x100/0x310 [ 993.242602] get_signal+0x385/0x1ca0 [ 993.246318] ? perf_trace_lock+0x109/0x4b0 [ 993.250645] ? save_trace+0x290/0x290 [ 993.254533] do_signal+0x7c/0x1690 [ 993.258077] ? find_held_lock+0x2d/0x110 [ 993.262141] ? __might_fault+0x104/0x1b0 [ 993.266200] ? setup_sigcontext+0x820/0x820 [ 993.270604] ? lock_downgrade+0x6e0/0x6e0 [ 993.274757] ? __might_fault+0x177/0x1b0 [ 993.278816] ? _copy_to_user+0x82/0xd0 [ 993.282790] ? SyS_futex+0x1e8/0x2c0 [ 993.286498] ? SyS_futex+0x1f2/0x2c0 [ 993.290212] ? exit_to_usermode_loop+0x41/0x220 [ 993.294876] exit_to_usermode_loop+0x159/0x220 [ 993.299458] do_syscall_64+0x4a3/0x640 [ 993.303479] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 993.308757] RIP: 0033:0x45ca29 [ 993.311978] RSP: 002b:00007fa0858c9cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 993.319719] RAX: fffffffffffffe00 RBX: 000000000078bf08 RCX: 000000000045ca29 [ 993.326983] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bf08 [ 993.334248] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 993.341515] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 993.348801] R13: 00007ffd0a372a9f R14: 00007fa0858ca9c0 R15: 000000000078bf0c [ 993.414292] Mem-Info: [ 993.416857] active_anon:228002 inactive_anon:1099744 isolated_anon:0 [ 993.416857] active_file:35 inactive_file:36 isolated_file:0 [ 993.416857] unevictable:29489 dirty:0 writeback:0 unstable:0 [ 993.416857] slab_reclaimable:19477 slab_unreclaimable:108446 [ 993.416857] mapped:59077 shmem:4218 pagetables:14596 bounce:0 [ 993.416857] free:24937 free_pcp:30 free_cma:0 [ 993.472132] Node 0 active_anon:901368kB inactive_anon:766876kB active_file:60kB inactive_file:0kB unevictable:104248kB isolated(anon):0kB isolated(file):0kB mapped:234940kB dirty:0kB writeback:0kB shmem:16872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 993.674228] Node 1 active_anon:10640kB inactive_anon:3632100kB active_file:12kB inactive_file:28kB unevictable:13712kB isolated(anon):0kB isolated(file):0kB mapped:1304kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 993.866883] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:20kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:76kB writepending:0kB present:15992kB managed:15908kB mlocked:76kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 994.097608] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 994.141569] Node 0 DMA32 free:36224kB min:36272kB low:45340kB high:54408kB active_anon:901348kB inactive_anon:761640kB active_file:36kB inactive_file:60kB unevictable:104176kB writepending:0kB present:3129332kB managed:2621260kB mlocked:104176kB kernel_stack:13280kB pagetables:26192kB bounce:0kB free_pcp:220kB local_pcp:212kB free_cma:0kB [ 994.380057] lowmem_reserve[]: 0 0 0 0 0 [ 994.404049] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 994.579364] lowmem_reserve[]: 0 0 0 0 0 [ 994.590119] Node 1 Normal free:53548kB min:53612kB low:67012kB high:80412kB active_anon:10632kB inactive_anon:3632100kB active_file:0kB inactive_file:28kB unevictable:13792kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13792kB kernel_stack:8864kB pagetables:31996kB bounce:0kB free_pcp:160kB local_pcp:160kB free_cma:0kB [ 994.844082] lowmem_reserve[]: 0 0 0 0 0 [ 994.848124] Node 0 DMA: 4*4kB (UE) 6*8kB (UE) 6*16kB (U) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 994.974573] Node 0 DMA32: 960*4kB (UME) 725*8kB (UME) 237*16kB (UME) 152*32kB (UME) 165*64kB (UM) 63*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37944kB [ 995.027561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 995.052744] Node 1 Normal: 161*4kB (UME) 258*8kB (UME) 45*16kB (UME) 332*32kB (UME) 153*64kB (UE) 84*128kB (UM) 41*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53796kB [ 995.155317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:52:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:44 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:44 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 995.201789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 995.250738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:52:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 995.320248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:52:44 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 995.381359] 12582 total pagecache pages [ 995.425312] 0 pages in swap cache [ 995.453797] Swap cache stats: add 0, delete 0, find 0/0 07:52:44 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9b", 0x90) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 995.506610] Free swap = 0kB [ 995.580831] Total swap = 0kB [ 995.602639] 1965979 pages RAM [ 995.633766] 0 pages HighMem/MovableOnly 07:52:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0), 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 995.671099] 339053 pages reserved [ 995.691755] 0 pages cma reserved [ 995.709035] Out of memory: Kill process 32352 (syz-executor.0) score 1008 or sacrifice child 07:52:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 996.400314] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 996.471208] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 996.476599] CPU: 0 PID: 32375 Comm: syz-executor.4 Not tainted 4.14.180-syzkaller #0 [ 996.485972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.495506] Call Trace: [ 996.498106] dump_stack+0x13e/0x194 [ 996.501749] dump_header+0x178/0x6d4 [ 996.505464] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 996.510917] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 996.516980] ? ___ratelimit+0x50/0x519 [ 996.520881] oom_kill_process.cold+0x10/0xae3 [ 996.525379] ? lock_acquire+0x170/0x3f0 [ 996.529611] ? lock_downgrade+0x6e0/0x6e0 [ 996.533769] out_of_memory+0x2d5/0x1110 [ 996.538277] ? oom_killer_disable+0x1c0/0x1c0 [ 996.542779] ? mutex_trylock+0x152/0x1a0 [ 996.546854] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 996.552061] ? warn_alloc+0xf0/0xf0 [ 996.555708] __alloc_pages_nodemask+0x5d3/0x700 [ 996.560383] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 996.565407] ? lock_downgrade+0x6e0/0x6e0 [ 996.569580] alloc_pages_current+0xe7/0x1e0 [ 996.573910] __page_cache_alloc+0x245/0x3d0 [ 996.578242] filemap_fault+0xc18/0x1c50 [ 996.582321] ? __lock_page_or_retry+0x8a0/0x8a0 [ 996.587172] ? lock_acquire+0x170/0x3f0 [ 996.591321] ? ext4_filemap_fault+0x7c/0xb0 [ 996.595658] ext4_filemap_fault+0x84/0xb0 [ 996.600320] __do_fault+0xfa/0x380 [ 996.603869] __handle_mm_fault+0x22e9/0x3280 [ 996.608285] ? copy_page_range+0x1d70/0x1d70 [ 996.612703] ? find_held_lock+0x2d/0x110 [ 996.616781] handle_mm_fault+0x288/0x7a0 [ 996.621020] __get_user_pages+0x44d/0x11e0 [ 996.625259] ? follow_page_mask+0x1580/0x1580 [ 996.629749] ? perf_trace_lock+0x109/0x4b0 [ 996.634521] ? lock_acquire+0x170/0x3f0 [ 996.638673] ? __mm_populate+0x1e3/0x2c0 [ 996.642737] populate_vma_page_range+0x17b/0x210 [ 996.647502] __mm_populate+0x195/0x2c0 [ 996.651415] ? populate_vma_page_range+0x210/0x210 [ 996.656880] ? security_capable+0x88/0xb0 [ 996.661034] SyS_mlockall+0x3f5/0x520 [ 996.664828] ? SyS_munlock+0xf0/0xf0 [ 996.668547] do_syscall_64+0x1d5/0x640 [ 996.672445] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 996.678419] RIP: 0033:0x45ca29 [ 996.681609] RSP: 002b:00007f23a531ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 996.689425] RAX: ffffffffffffffda RBX: 00000000004f5d80 RCX: 000000000045ca29 [ 996.697387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 996.704878] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 996.712318] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 996.719679] R13: 000000000000073d R14: 00000000004ca1ec R15: 00007f23a531b6d4 [ 996.801007] Mem-Info: [ 996.804202] active_anon:228204 inactive_anon:1101771 isolated_anon:0 [ 996.804202] active_file:33 inactive_file:23 isolated_file:32 [ 996.804202] unevictable:26619 dirty:0 writeback:0 unstable:0 [ 996.804202] slab_reclaimable:19475 slab_unreclaimable:108831 [ 996.804202] mapped:59214 shmem:6266 pagetables:14680 bounce:0 [ 996.804202] free:24935 free_pcp:109 free_cma:0 [ 996.947576] Node 0 active_anon:902084kB inactive_anon:774980kB active_file:4kB inactive_file:272kB unevictable:93932kB isolated(anon):0kB isolated(file):48kB mapped:236560kB dirty:0kB writeback:72kB shmem:25060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 996.978733] Node 1 active_anon:10776kB inactive_anon:3632104kB active_file:0kB inactive_file:24kB unevictable:13744kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:8kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 997.006731] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:16kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:84kB writepending:0kB present:15992kB managed:15908kB mlocked:84kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.033970] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 997.039059] Node 0 DMA32 free:35916kB min:36272kB low:45340kB high:54408kB active_anon:902124kB inactive_anon:769828kB active_file:32kB inactive_file:64kB unevictable:93960kB writepending:0kB present:3129332kB managed:2621260kB mlocked:93960kB kernel_stack:13568kB pagetables:26560kB bounce:0kB free_pcp:376kB local_pcp:0kB free_cma:0kB [ 997.134358] lowmem_reserve[]: 0 0 0 0 0 [ 997.138547] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.401394] lowmem_reserve[]: 0 0 0 0 0 [ 997.437270] Node 1 Normal free:53500kB min:53612kB low:67012kB high:80412kB active_anon:10776kB inactive_anon:3632104kB active_file:12kB inactive_file:12kB unevictable:13764kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13764kB kernel_stack:8896kB pagetables:32172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.486559] lowmem_reserve[]: 0 0 0 0 0 [ 997.564283] Node 0 DMA: 5*4kB (UME) 7*8kB (UME) 7*16kB (UM) 6*32kB (UME) 5*64kB (UME) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 997.720154] Node 0 DMA32: 511*4kB (UME) 651*8kB (UME) 323*16kB (UME) 131*32kB (UME) 166*64kB (UM) 63*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36324kB [ 997.856466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 997.951460] Node 1 Normal: 109*4kB (UME) 219*8kB (UME) 70*16kB (UE) 335*32kB (UME) 155*64kB (UME) 78*128kB (UM) 43*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53644kB [ 998.098829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 998.165094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 998.197883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 998.207216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 998.238840] 11394 total pagecache pages [ 998.258706] 0 pages in swap cache [ 998.288396] Swap cache stats: add 0, delete 0, find 0/0 [ 998.299303] Free swap = 0kB [ 998.324020] Total swap = 0kB [ 998.327059] 1965979 pages RAM [ 998.340308] 0 pages HighMem/MovableOnly [ 998.360048] 339053 pages reserved [ 998.369243] 0 pages cma reserved [ 998.410470] Out of memory: Kill process 32373 (syz-executor.4) score 1008 or sacrifice child [ 998.420263] Killed process 32375 (syz-executor.4) total-vm:74972kB, anon-rss:18028kB, file-rss:46120kB, shmem-rss:0kB [ 998.467842] oom_reaper: reaped process 32375 (syz-executor.4), now anon-rss:18020kB, file-rss:11304kB, shmem-rss:0kB [ 998.500204] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 998.592333] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 998.607552] CPU: 1 PID: 6332 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 998.615036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.624396] Call Trace: [ 998.626996] dump_stack+0x13e/0x194 [ 998.630644] dump_header+0x178/0x6d4 [ 998.634425] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 998.639655] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 998.644769] ? ___ratelimit+0x50/0x519 [ 998.648666] oom_kill_process.cold+0x10/0xae3 [ 998.653166] ? lock_acquire+0x170/0x3f0 [ 998.657150] ? lock_downgrade+0x6e0/0x6e0 [ 998.661313] out_of_memory+0x2d5/0x1110 [ 998.665299] ? oom_killer_disable+0x1c0/0x1c0 [ 998.669794] ? mutex_trylock+0x152/0x1a0 [ 998.673866] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 998.678930] ? warn_alloc+0xf0/0xf0 [ 998.682697] __alloc_pages_nodemask+0x5d3/0x700 [ 998.687554] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 998.692663] ? lock_downgrade+0x6e0/0x6e0 [ 998.697349] alloc_pages_current+0xe7/0x1e0 [ 998.701673] __page_cache_alloc+0x245/0x3d0 [ 998.706003] filemap_fault+0xc18/0x1c50 [ 998.710127] ? __lock_page_or_retry+0x8a0/0x8a0 [ 998.714798] ? lock_acquire+0x170/0x3f0 [ 998.718863] ? ext4_filemap_fault+0x7c/0xb0 [ 998.723204] ext4_filemap_fault+0x84/0xb0 [ 998.727361] __do_fault+0xfa/0x380 [ 998.730905] __handle_mm_fault+0x22e9/0x3280 [ 998.735788] ? copy_page_range+0x1d70/0x1d70 [ 998.740204] ? find_held_lock+0x2d/0x110 [ 998.744279] handle_mm_fault+0x288/0x7a0 [ 998.748343] __do_page_fault+0x4bc/0xb40 [ 998.752412] ? vmalloc_fault+0xdf0/0xdf0 [ 998.756501] ? do_page_fault+0x60/0x4f2 [ 998.760481] ? page_fault+0x2f/0x50 [ 998.764146] page_fault+0x45/0x50 [ 998.767608] RIP: 0001:0x11 07:52:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:48 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:48 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:52:48 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 998.770448] RSP: 3b9142cb:000000c4200396e8 EFLAGS: e8967cca73 [ 999.530909] Mem-Info: [ 999.540027] active_anon:228212 inactive_anon:1101804 isolated_anon:0 [ 999.540027] active_file:58 inactive_file:76 isolated_file:0 [ 999.540027] unevictable:25282 dirty:0 writeback:0 unstable:0 [ 999.540027] slab_reclaimable:19430 slab_unreclaimable:109752 [ 999.540027] mapped:58168 shmem:6266 pagetables:14716 bounce:0 [ 999.540027] free:25193 free_pcp:19 free_cma:0 [ 999.908297] Node 0 active_anon:902072kB inactive_anon:775052kB active_file:56kB inactive_file:20kB unevictable:90628kB isolated(anon):0kB isolated(file):0kB mapped:233072kB dirty:0kB writeback:0kB shmem:25060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1000.177041] Node 1 active_anon:10868kB inactive_anon:3632108kB active_file:0kB inactive_file:0kB unevictable:12196kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1000.496558] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:84kB writepending:0kB present:15992kB managed:15908kB mlocked:84kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1000.713141] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1000.754872] Node 0 DMA32 free:36212kB min:36272kB low:45340kB high:54408kB active_anon:902144kB inactive_anon:769892kB active_file:28kB inactive_file:0kB unevictable:90632kB writepending:0kB present:3129332kB managed:2621260kB mlocked:90632kB kernel_stack:13504kB pagetables:26552kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1001.014665] lowmem_reserve[]: 0 0 0 0 0 [ 1001.042210] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1001.070162] lowmem_reserve[]: 0 0 0 0 0 [ 1001.074183] Node 1 Normal free:53568kB min:53612kB low:67012kB high:80412kB active_anon:10868kB inactive_anon:3632108kB active_file:0kB inactive_file:32kB unevictable:12312kB writepending:0kB present:3932160kB managed:3870192kB mlocked:12312kB kernel_stack:8960kB pagetables:32312kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1001.103914] lowmem_reserve[]: 0 0 0 0 0 [ 1001.108495] Node 0 DMA: 4*4kB (UE) 6*8kB (UE) 6*16kB (U) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 1001.124859] Node 0 DMA32: 637*4kB (UME) 268*8kB (UME) 436*16kB (UME) 126*32kB (UME) 177*64kB (UM) 63*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36116kB [ 1001.140895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1001.151777] Node 1 Normal: 78*4kB (UME) 69*8kB (UME) 76*16kB (UME) 339*32kB (UME) 155*64kB (UME) 88*128kB (UM) 42*256kB (UM) 15*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53568kB [ 1001.169049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1001.178645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1001.187288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1001.197223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1001.205920] 10506 total pagecache pages [ 1001.209879] 0 pages in swap cache [ 1001.213497] Swap cache stats: add 0, delete 0, find 0/0 [ 1001.218851] Free swap = 0kB [ 1001.221894] Total swap = 0kB [ 1001.224921] 1965979 pages RAM [ 1001.228000] 0 pages HighMem/MovableOnly [ 1001.232594] 339053 pages reserved [ 1001.236375] 0 pages cma reserved [ 1001.239741] Out of memory: Kill process 32382 (syz-executor.1) score 1007 or sacrifice child [ 1001.391845] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1001.534120] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1001.572363] CPU: 0 PID: 6332 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1001.579939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.590683] Call Trace: [ 1001.593275] dump_stack+0x13e/0x194 [ 1001.596900] dump_header+0x178/0x6d4 [ 1001.600614] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1001.605722] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1001.611164] ? ___ratelimit+0x50/0x519 [ 1001.615051] oom_kill_process.cold+0x10/0xae3 [ 1001.619549] ? lock_downgrade+0x6e0/0x6e0 [ 1001.624067] out_of_memory+0x2d5/0x1110 [ 1001.628047] ? oom_killer_disable+0x1c0/0x1c0 [ 1001.632899] ? mutex_trylock+0x152/0x1a0 [ 1001.636963] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1001.641813] ? warn_alloc+0xf0/0xf0 [ 1001.645713] __alloc_pages_nodemask+0x5d3/0x700 [ 1001.650848] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1001.656641] ? lock_downgrade+0x6e0/0x6e0 [ 1001.661277] alloc_pages_current+0xe7/0x1e0 [ 1001.665600] __page_cache_alloc+0x245/0x3d0 [ 1001.671489] filemap_fault+0xc18/0x1c50 [ 1001.675558] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1001.680269] ? lock_acquire+0x170/0x3f0 [ 1001.685804] ? ext4_filemap_fault+0x7c/0xb0 [ 1001.690165] ext4_filemap_fault+0x84/0xb0 [ 1001.694488] __do_fault+0xfa/0x380 [ 1001.698029] __handle_mm_fault+0x22e9/0x3280 [ 1001.702434] ? copy_page_range+0x1d70/0x1d70 [ 1001.707852] ? find_held_lock+0x2d/0x110 [ 1001.712012] handle_mm_fault+0x288/0x7a0 [ 1001.716079] __do_page_fault+0x4bc/0xb40 [ 1001.720658] ? vmalloc_fault+0xdf0/0xdf0 [ 1001.724910] ? do_page_fault+0x60/0x4f2 [ 1001.729005] ? page_fault+0x2f/0x50 [ 1001.732635] page_fault+0x45/0x50 [ 1001.736094] RIP: 0001:0x11 [ 1001.738938] RSP: 3b9142cb:000000c4200396e8 EFLAGS: e8967cca73 [ 1002.246925] Mem-Info: [ 1002.257433] active_anon:228203 inactive_anon:1107771 isolated_anon:0 [ 1002.257433] active_file:724 inactive_file:862 isolated_file:24 [ 1002.257433] unevictable:18123 dirty:0 writeback:0 unstable:0 [ 1002.257433] slab_reclaimable:19419 slab_unreclaimable:109375 [ 1002.257433] mapped:57268 shmem:6266 pagetables:14696 bounce:0 [ 1002.257433] free:25259 free_pcp:303 free_cma:0 07:52:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xa4, &(0x7f00000002c0)="c4fe910c6786cec96ddb5322addee07bee6333b5cacd891969b71832cb470c94d61f3514dca76fd1664d20b4712c225da4a455f4c9fd98a5680956f9291607e39a209852cea901000000a933137a89acd6ecd74d453ff2bdb96931228d39a285f764efdd99042510d5311ae02ecb128a84445dd8f24bd538e3d3f8fbe0a10fff4bbaef7cd058ec3a5411c890a73cef2db1355afc76d8d7b0781702986234093f2623993c"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 07:52:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:51 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1002.411545] Node 0 active_anon:901996kB inactive_anon:775076kB active_file:4048kB inactive_file:6692kB unevictable:60776kB isolated(anon):0kB isolated(file):96kB mapped:228244kB dirty:0kB writeback:0kB shmem:25056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1002.680307] Node 1 active_anon:10816kB inactive_anon:3636708kB active_file:0kB inactive_file:20kB unevictable:116kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 07:52:52 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1002.900248] Node 0 DMA free:10492kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.130496] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1003.161656] Node 0 DMA32 free:36888kB min:36272kB low:45340kB high:54408kB active_anon:901588kB inactive_anon:769832kB active_file:1332kB inactive_file:1128kB unevictable:90084kB writepending:72kB present:3129332kB managed:2621260kB mlocked:90084kB kernel_stack:13440kB pagetables:26372kB bounce:0kB free_pcp:176kB local_pcp:44kB free_cma:0kB [ 1003.301473] lowmem_reserve[]: 0 0 0 0 0 [ 1003.327300] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.387892] lowmem_reserve[]: 0 0 0 0 0 [ 1003.398474] Node 1 Normal free:53584kB min:53612kB low:67012kB high:80412kB active_anon:10584kB inactive_anon:3632100kB active_file:4kB inactive_file:8kB unevictable:13152kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13152kB kernel_stack:8832kB pagetables:31992kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.461301] lowmem_reserve[]: 0 0 0 0 0 [ 1003.484749] Node 0 DMA: 5*4kB (UME) 4*8kB (UME) 7*16kB (UM) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1003.612144] Node 0 DMA32: 638*4kB (UME) 453*8kB (UME) 326*16kB (UME) 128*32kB (UME) 177*64kB (UM) 63*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35904kB [ 1003.762384] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1003.853407] Node 1 Normal: 155*4kB (UME) 91*8kB (UME) 76*16kB (UME) 338*32kB (UME) 154*64kB (UME) 82*128kB (UM) 42*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53700kB [ 1003.978732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1003.987845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.006708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.015638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.034393] 9990 total pagecache pages [ 1004.038390] 0 pages in swap cache [ 1004.041979] Swap cache stats: add 0, delete 0, find 0/0 [ 1004.047469] Free swap = 0kB [ 1004.057941] Total swap = 0kB [ 1004.061050] 1965979 pages RAM [ 1004.064150] 0 pages HighMem/MovableOnly [ 1004.068316] 339053 pages reserved [ 1004.075290] 0 pages cma reserved [ 1004.078839] Out of memory: Kill process 32402 (syz-executor.1) score 1008 or sacrifice child [ 1004.109276] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1004.127408] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1004.134670] CPU: 0 PID: 6332 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1004.142656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.152036] Call Trace: [ 1004.154621] dump_stack+0x13e/0x194 [ 1004.158233] dump_header+0x178/0x6d4 [ 1004.161936] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1004.166944] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1004.172042] ? ___ratelimit+0x50/0x519 [ 1004.176210] oom_kill_process.cold+0x10/0xae3 [ 1004.180740] ? lock_downgrade+0x6e0/0x6e0 [ 1004.184899] out_of_memory+0x2d5/0x1110 [ 1004.188869] ? oom_killer_disable+0x1c0/0x1c0 [ 1004.193361] ? mutex_trylock+0x152/0x1a0 [ 1004.197432] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1004.202298] ? warn_alloc+0xf0/0xf0 [ 1004.205945] __alloc_pages_nodemask+0x5d3/0x700 [ 1004.210621] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1004.215813] ? lock_downgrade+0x6e0/0x6e0 [ 1004.219971] alloc_pages_current+0xe7/0x1e0 [ 1004.224382] __page_cache_alloc+0x245/0x3d0 [ 1004.228705] filemap_fault+0xc18/0x1c50 [ 1004.232690] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1004.237359] ? lock_acquire+0x170/0x3f0 [ 1004.241332] ? ext4_filemap_fault+0x7c/0xb0 [ 1004.245676] ext4_filemap_fault+0x84/0xb0 [ 1004.249822] __do_fault+0xfa/0x380 [ 1004.253366] __handle_mm_fault+0x22e9/0x3280 [ 1004.257909] ? copy_page_range+0x1d70/0x1d70 [ 1004.262349] ? find_held_lock+0x2d/0x110 [ 1004.266962] handle_mm_fault+0x288/0x7a0 [ 1004.271144] __do_page_fault+0x4bc/0xb40 [ 1004.275207] ? vmalloc_fault+0xdf0/0xdf0 [ 1004.279278] ? do_page_fault+0x60/0x4f2 [ 1004.283250] ? page_fault+0x2f/0x50 [ 1004.287073] page_fault+0x45/0x50 [ 1004.290522] RIP: 0001:0x11 [ 1004.293355] RSP: 3b9142cb:000000c4200396e8 EFLAGS: e8967cca73 [ 1004.308878] Mem-Info: [ 1004.338206] active_anon:228048 inactive_anon:1101771 isolated_anon:0 [ 1004.338206] active_file:16 inactive_file:16 isolated_file:0 [ 1004.338206] unevictable:26731 dirty:0 writeback:0 unstable:0 [ 1004.338206] slab_reclaimable:19464 slab_unreclaimable:109227 [ 1004.338206] mapped:57763 shmem:6266 pagetables:14612 bounce:0 [ 1004.338206] free:24971 free_pcp:30 free_cma:0 [ 1004.396757] Node 0 active_anon:901608kB inactive_anon:774984kB active_file:48kB inactive_file:72kB unevictable:93696kB isolated(anon):0kB isolated(file):0kB mapped:231052kB dirty:0kB writeback:0kB shmem:25064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1004.439888] Node 1 active_anon:10584kB inactive_anon:3632100kB active_file:4kB inactive_file:4kB unevictable:13228kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1004.476393] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1004.513189] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1004.518261] Node 0 DMA32 free:35872kB min:36272kB low:45340kB high:54408kB active_anon:901596kB inactive_anon:769832kB active_file:48kB inactive_file:0kB unevictable:93640kB writepending:0kB present:3129332kB managed:2621260kB mlocked:93640kB kernel_stack:13504kB pagetables:26384kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1004.560821] lowmem_reserve[]: 0 0 0 0 0 [ 1004.565117] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1004.617075] lowmem_reserve[]: 0 0 0 0 0 [ 1004.642936] Node 1 Normal free:53576kB min:53612kB low:67012kB high:80412kB active_anon:10584kB inactive_anon:3632100kB active_file:4kB inactive_file:4kB unevictable:13228kB writepending:0kB present:3932160kB managed:3870192kB mlocked:13228kB kernel_stack:8832kB pagetables:32016kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1004.686482] lowmem_reserve[]: 0 0 0 0 0 [ 1004.693770] Node 0 DMA: 5*4kB (UME) 4*8kB (UME) 7*16kB (UM) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1004.722246] Node 0 DMA32: 638*4kB (UME) 453*8kB (UME) 326*16kB (UME) 126*32kB (UME) 177*64kB (UM) 63*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35840kB [ 1004.751034] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1004.767782] Node 1 Normal: 154*4kB (UE) 90*8kB (UE) 75*16kB (UE) 337*32kB (UME) 153*64kB (UE) 82*128kB (UM) 42*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53576kB [ 1004.809471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.835730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.849583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.878387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1004.887124] 9990 total pagecache pages [ 1004.906987] 0 pages in swap cache [ 1004.913665] Swap cache stats: add 0, delete 0, find 0/0 [ 1004.919029] Free swap = 0kB [ 1004.947962] Total swap = 0kB [ 1004.984234] 1965979 pages RAM [ 1004.987390] 0 pages HighMem/MovableOnly [ 1005.029619] 339053 pages reserved [ 1005.033103] 0 pages cma reserved [ 1005.036472] Out of memory: Kill process 32427 (syz-executor.4) score 1007 or sacrifice child [ 1005.150901] Killed process 32427 (syz-executor.4) total-vm:74972kB, anon-rss:17976kB, file-rss:39272kB, shmem-rss:0kB 07:52:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:54 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3, 0x3}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000140)={0x9}) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r4 = getpid() perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x6, 0x0, 0x3, 0x64, 0x0, 0x80000001, 0x82800, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffdc, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x3080, 0x0, 0x0, 0x0, 0x1, 0x3}, r4, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$setownex(r6, 0xf, &(0x7f0000000240)={0x1, r4}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r0, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:55 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$nfs4(&(0x7f00000003c0)='nfs4\x00', &(0x7f0000000400)='./file0\x00', 0x3f, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="58682d9f34d44bb66eb8f3eec99eb32cbb490c4dd6adb415713e1b285444adb6357b81be9cc9baea8131788eb102858c5dea9a11d013823dc097e77fcd5363d47e8c18a8c281a3b16774df13530c2f9561bd1e3a1241891b0e6491ee9c", 0x5d, 0x4}], 0x14, &(0x7f0000000540)='syz') r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, r1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680)='/dev/hwrng\x00', 0x430080, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000780)=""/59) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r5, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x10) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b46c24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x100, r2) r6 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000180)="65db2ae2afd75d6faad432d2f7e6cd62514f810bfc47f9311a0f75076beb0d0cfe4cc90805770abe22dccf86f1ca4aa1d7bac7d60b6d71cd03d36ef002737865844d3374344f397563bcc93295d961dfc1c4c638622889fbbcf29334527efc8ad8e591c9cb6da08cf654f296ce909b7eea0d35a22af211b9afe9d1348dc50467d27ce458006aa65474ad918db240994025fb073397a44084bda79d2467974d684b4c2bf1f809735d7a8a", 0xfffffffffffffec5, r2) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r0, r6}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:56 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00'}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) dup2(r0, r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x170, 0x120, 0x120, 0x0, 0x0, 0x280, 0x230, 0x230, 0x280, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 07:52:58 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) dup2(r0, r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x170, 0x120, 0x120, 0x0, 0x0, 0x280, 0x230, 0x230, 0x280, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 07:52:59 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:52:59 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x3223) 07:52:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:52:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 07:52:59 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:53:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @local, 0x0, 0x1, [@multicast1]}, 0x14) [ 1011.723174] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1011.797500] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1011.805707] CPU: 0 PID: 6360 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0 [ 1011.813554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.823111] Call Trace: [ 1011.825705] dump_stack+0x13e/0x194 [ 1011.829386] dump_header+0x178/0x6d4 [ 1011.833099] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1011.838122] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1011.843407] ? ___ratelimit+0x50/0x519 [ 1011.847827] oom_kill_process.cold+0x10/0xae3 [ 1011.852421] ? lock_acquire+0x170/0x3f0 [ 1011.857208] ? lock_downgrade+0x6e0/0x6e0 [ 1011.861448] out_of_memory+0x2d5/0x1110 [ 1011.865613] ? oom_killer_disable+0x1c0/0x1c0 [ 1011.873278] ? mutex_trylock+0x152/0x1a0 [ 1011.877345] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1011.882207] ? warn_alloc+0xf0/0xf0 [ 1011.886092] __alloc_pages_nodemask+0x5d3/0x700 [ 1011.890945] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1011.896620] ? lock_downgrade+0x6e0/0x6e0 [ 1011.900799] alloc_pages_current+0xe7/0x1e0 [ 1011.905122] __page_cache_alloc+0x245/0x3d0 [ 1011.909445] filemap_fault+0xc18/0x1c50 [ 1011.913470] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1011.918140] ? lock_acquire+0x170/0x3f0 [ 1011.922120] ? ext4_filemap_fault+0x7c/0xb0 [ 1011.926451] ext4_filemap_fault+0x84/0xb0 [ 1011.930689] __do_fault+0xfa/0x380 [ 1011.934240] __handle_mm_fault+0x22e9/0x3280 [ 1011.938648] ? copy_page_range+0x1d70/0x1d70 [ 1011.943096] ? find_held_lock+0x2d/0x110 [ 1011.947220] handle_mm_fault+0x288/0x7a0 [ 1011.951804] __do_page_fault+0x4bc/0xb40 [ 1011.955877] ? vmalloc_fault+0xdf0/0xdf0 [ 1011.959936] ? do_page_fault+0x60/0x4f2 [ 1011.963917] ? page_fault+0x2f/0x50 [ 1011.967553] page_fault+0x45/0x50 [ 1011.971004] RIP: a372d10:0xf6c70 [ 1011.974973] RSP: f6ca1:0000000000000a6a EFLAGS: 00000006 [ 1012.276456] Mem-Info: [ 1012.303290] active_anon:228223 inactive_anon:1101771 isolated_anon:0 [ 1012.303290] active_file:50 inactive_file:19 isolated_file:0 [ 1012.303290] unevictable:27485 dirty:0 writeback:0 unstable:0 [ 1012.303290] slab_reclaimable:19507 slab_unreclaimable:108103 [ 1012.303290] mapped:59676 shmem:6266 pagetables:14647 bounce:0 [ 1012.303290] free:25024 free_pcp:97 free_cma:0 [ 1012.344589] Node 0 active_anon:902152kB inactive_anon:774984kB active_file:80kB inactive_file:0kB unevictable:100032kB isolated(anon):0kB isolated(file):0kB mapped:234840kB dirty:0kB writeback:0kB shmem:25064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1012.388151] Node 1 active_anon:10740kB inactive_anon:3632100kB active_file:0kB inactive_file:24kB unevictable:9908kB isolated(anon):0kB isolated(file):0kB mapped:3864kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1012.455745] Node 0 DMA free:10436kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:56kB writepending:0kB present:15992kB managed:15908kB mlocked:56kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.696201] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1012.740645] Node 0 DMA32 free:35660kB min:36272kB low:45340kB high:54408kB active_anon:902140kB inactive_anon:769832kB active_file:76kB inactive_file:0kB unevictable:100480kB writepending:0kB present:3129332kB managed:2621260kB mlocked:100480kB kernel_stack:13440kB pagetables:26408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1013.016447] lowmem_reserve[]: 0 0 0 0 0 [ 1013.046335] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1013.259423] lowmem_reserve[]: 0 0 0 0 0 [ 1013.285559] Node 1 Normal free:53604kB min:53612kB low:67012kB high:80412kB active_anon:10740kB inactive_anon:3632100kB active_file:0kB inactive_file:36kB unevictable:9908kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9908kB kernel_stack:8864kB pagetables:32132kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1013.526050] lowmem_reserve[]: 0 0 0 0 0 [ 1013.553811] Node 0 DMA: 5*4kB (UME) 4*8kB (UME) 7*16kB (UM) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 1013.703271] Node 0 DMA32: 677*4kB (UME) 846*8kB (UE) 324*16kB (UE) 48*32kB (UME) 177*64kB (UM) 58*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35972kB [ 1013.823628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1013.890329] Node 1 Normal: 135*4kB (UME) 55*8kB (UME) 16*16kB (E) 290*32kB (UME) 182*64kB (UME) 90*128kB (UM) 42*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53652kB [ 1013.986334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.995269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.027693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.083418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1014.106481] 11275 total pagecache pages [ 1014.138055] 0 pages in swap cache 07:53:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 07:53:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfffffffd}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002a00)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) [ 1014.161233] Swap cache stats: add 0, delete 0, find 0/0 [ 1014.168094] Free swap = 0kB [ 1014.199103] Total swap = 0kB [ 1014.202205] 1965979 pages RAM [ 1014.205307] 0 pages HighMem/MovableOnly 07:53:03 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1014.239534] 339053 pages reserved [ 1014.243014] 0 pages cma reserved [ 1014.246387] Out of memory: Kill process 32488 (syz-executor.4) score 1008 or sacrifice child 07:53:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:53:03 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:03 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:03 executing program 3: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="10002bbd700005002f000001000008003b0001000000050038000000005108003a3e0000090005003800000000000800225f3a0003000000d00ef556d4e729"], 0x3}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 07:53:03 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) [ 1015.051120] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 1015.202297] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1015.207462] CPU: 0 PID: 32556 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1015.215341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.224785] Call Trace: [ 1015.227404] dump_stack+0x13e/0x194 [ 1015.235500] dump_header+0x178/0x6d4 [ 1015.239242] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1015.244277] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1015.249389] ? ___ratelimit+0x50/0x519 [ 1015.253291] oom_kill_process.cold+0x10/0xae3 [ 1015.257796] ? lock_downgrade+0x6e0/0x6e0 [ 1015.262100] out_of_memory+0x2d5/0x1110 [ 1015.267825] ? oom_killer_disable+0x1c0/0x1c0 [ 1015.272325] ? mutex_trylock+0x152/0x1a0 [ 1015.276400] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1015.281272] ? warn_alloc+0xf0/0xf0 [ 1015.284901] ? find_held_lock+0x2d/0x110 [ 1015.288968] ? fs_reclaim_acquire+0x10/0x10 [ 1015.293396] __alloc_pages_nodemask+0x5d3/0x700 [ 1015.298081] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1015.303056] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1015.308134] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1015.313166] ? cache_grow_begin+0x32d/0x410 [ 1015.317502] cache_grow_begin+0x7b/0x410 [ 1015.321578] fallback_alloc+0x205/0x2b0 [ 1015.325559] kmem_cache_alloc+0x1ea/0x770 [ 1015.329734] ? retire_userns_sysctls+0x80/0x80 [ 1015.334337] copy_pid_ns+0x1b2/0xa70 [ 1015.338054] ? copy_ipcs+0x2c4/0x3e0 [ 1015.341778] create_new_namespaces+0x25f/0x730 [ 1015.346372] copy_namespaces+0x27b/0x310 [ 1015.350453] copy_process.part.0+0x2603/0x6a50 [ 1015.355048] ? check_preemption_disabled+0x35/0x240 [ 1015.360164] ? perf_trace_lock+0x109/0x4b0 [ 1015.364412] ? save_trace+0x290/0x290 [ 1015.368245] ? __cleanup_sighand+0x40/0x40 [ 1015.372486] ? lock_downgrade+0x6e0/0x6e0 [ 1015.376655] _do_fork+0x180/0xc80 [ 1015.380119] ? put_timespec64+0xaa/0xf0 [ 1015.384101] ? fork_idle+0x270/0x270 [ 1015.387824] ? SyS_clock_gettime+0xf5/0x180 [ 1015.392148] ? SyS_clock_settime+0x1a0/0x1a0 [ 1015.396567] ? do_syscall_64+0x4c/0x640 [ 1015.400630] ? sys_vfork+0x20/0x20 [ 1015.404188] do_syscall_64+0x1d5/0x640 [ 1015.408439] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1015.413634] RIP: 0033:0x45ca29 [ 1015.416825] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1015.425410] RAX: ffffffffffffffda RBX: 00000000004dabc0 RCX: 000000000045ca29 [ 1015.432682] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000026100900 [ 1015.439953] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1015.447401] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1015.454671] R13: 0000000000000076 R14: 00000000004c331e R15: 00007fb9c190f6d4 [ 1015.665861] block nbd3: Attempted send on invalid socket [ 1015.673008] print_req_error: I/O error, dev nbd3, sector 64 [ 1015.972205] block nbd3: Attempted send on invalid socket [ 1015.977883] print_req_error: I/O error, dev nbd3, sector 120 [ 1016.819188] Mem-Info: [ 1016.821671] active_anon:228104 inactive_anon:1101771 isolated_anon:0 [ 1016.821671] active_file:7 inactive_file:0 isolated_file:0 [ 1016.821671] unevictable:27616 dirty:0 writeback:0 unstable:0 [ 1016.821671] slab_reclaimable:19457 slab_unreclaimable:108130 [ 1016.821671] mapped:58519 shmem:6266 pagetables:14660 bounce:0 [ 1016.821671] free:24995 free_pcp:41 free_cma:0 [ 1016.858976] Node 0 active_anon:901688kB inactive_anon:774984kB active_file:40kB inactive_file:36kB unevictable:102248kB isolated(anon):0kB isolated(file):0kB mapped:231656kB dirty:40kB writeback:4kB shmem:25064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1016.928278] Node 1 active_anon:10628kB inactive_anon:3632100kB active_file:0kB inactive_file:56kB unevictable:8248kB isolated(anon):0kB isolated(file):0kB mapped:2420kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1016.971813] Node 0 DMA free:10416kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.003667] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1017.008961] Node 0 DMA32 free:36788kB min:36272kB low:45340kB high:54408kB active_anon:901684kB inactive_anon:769852kB active_file:60kB inactive_file:84kB unevictable:102288kB writepending:0kB present:3129332kB managed:2621260kB mlocked:102288kB kernel_stack:13440kB pagetables:26388kB bounce:0kB free_pcp:72kB local_pcp:60kB free_cma:0kB [ 1017.039592] lowmem_reserve[]: 0 0 0 0 0 [ 1017.043624] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.081553] lowmem_reserve[]: 0 0 0 0 0 [ 1017.139694] Node 1 Normal free:53524kB min:53612kB low:67012kB high:80412kB active_anon:10628kB inactive_anon:3632100kB active_file:0kB inactive_file:4kB unevictable:8248kB writepending:0kB present:3932160kB managed:3870192kB mlocked:8248kB kernel_stack:8896kB pagetables:32032kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1017.424698] lowmem_reserve[]: 0 0 0 0 0 [ 1017.459607] Node 0 DMA: 8*4kB (UME) 6*8kB (UME) 4*16kB (UM) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10416kB [ 1017.563988] Node 0 DMA32: 804*4kB (UME) 366*8kB (UME) 567*16kB (UME) 64*32kB (UE) 161*64kB (UM) 59*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36400kB [ 1017.669157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1017.791762] Node 1 Normal: 163*4kB (UME) 37*8kB (ME) 34*16kB (UME) 294*32kB (UME) 182*64kB (UME) 86*128kB (UM) 42*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53524kB [ 1017.951131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.009360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.070319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.133094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:53:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 07:53:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:53:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1018.189976] 11286 total pagecache pages [ 1018.210922] 0 pages in swap cache [ 1018.226059] Swap cache stats: add 0, delete 0, find 0/0 07:53:07 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1018.280033] Free swap = 0kB [ 1018.337372] Total swap = 0kB [ 1018.358936] 1965979 pages RAM [ 1018.381933] 0 pages HighMem/MovableOnly [ 1018.423270] 339053 pages reserved [ 1018.451047] 0 pages cma reserved 07:53:07 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000a, 0x9) [ 1018.505227] Out of memory: Kill process 32549 (syz-executor.0) score 1008 or sacrifice child 07:53:07 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) 07:53:07 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) [ 1018.836068] block nbd3: Attempted send on invalid socket [ 1018.841953] print_req_error: I/O error, dev nbd3, sector 64 [ 1018.848208] block nbd3: Attempted send on invalid socket [ 1018.853730] print_req_error: I/O error, dev nbd3, sector 120 07:53:08 executing program 3: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x170, 0x120, 0x120, 0x0, 0x0, 0x280, 0x230, 0x230, 0x280, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0x108, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@srh={{0x30, 'srh\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 1019.967730] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1019.982861] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1020.047091] CPU: 0 PID: 6350 Comm: syz-fuzzer Not tainted 4.14.180-syzkaller #0 [ 1020.054662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.064206] Call Trace: [ 1020.067158] dump_stack+0x13e/0x194 [ 1020.076792] dump_header+0x178/0x6d4 [ 1020.080512] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1020.085530] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1020.090729] ? ___ratelimit+0x50/0x519 [ 1020.094875] oom_kill_process.cold+0x10/0xae3 [ 1020.099463] ? lock_downgrade+0x6e0/0x6e0 [ 1020.103697] out_of_memory+0x2d5/0x1110 [ 1020.107934] ? oom_killer_disable+0x1c0/0x1c0 [ 1020.112425] ? mutex_trylock+0x152/0x1a0 [ 1020.116483] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1020.121340] ? warn_alloc+0xf0/0xf0 [ 1020.125032] __alloc_pages_nodemask+0x5d3/0x700 [ 1020.129701] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1020.134976] ? lock_downgrade+0x6e0/0x6e0 [ 1020.139220] alloc_pages_current+0xe7/0x1e0 [ 1020.143544] __page_cache_alloc+0x245/0x3d0 [ 1020.149253] filemap_fault+0xc18/0x1c50 [ 1020.153233] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1020.157988] ? lock_acquire+0x170/0x3f0 [ 1020.162313] ? ext4_filemap_fault+0x7c/0xb0 [ 1020.166737] ext4_filemap_fault+0x84/0xb0 [ 1020.170884] __do_fault+0xfa/0x380 [ 1020.174431] __handle_mm_fault+0x22e9/0x3280 [ 1020.179095] ? copy_page_range+0x1d70/0x1d70 [ 1020.183892] ? find_held_lock+0x2d/0x110 [ 1020.188227] handle_mm_fault+0x288/0x7a0 [ 1020.192287] __do_page_fault+0x4bc/0xb40 [ 1020.196347] ? vmalloc_fault+0xdf0/0xdf0 [ 1020.200412] ? do_page_fault+0x60/0x4f2 [ 1020.204381] ? page_fault+0x2f/0x50 [ 1020.208007] page_fault+0x45/0x50 [ 1020.211486] RIP: 0001:0xc42dfa90e0 [ 1020.215102] RSP: 39b73570:000000c439b735b8 EFLAGS: c42b8ed750 [ 1021.041903] Mem-Info: [ 1021.054344] active_anon:228490 inactive_anon:1104312 isolated_anon:0 [ 1021.054344] active_file:30 inactive_file:24 isolated_file:0 [ 1021.054344] unevictable:25193 dirty:0 writeback:0 unstable:0 [ 1021.054344] slab_reclaimable:19524 slab_unreclaimable:107562 [ 1021.054344] mapped:60608 shmem:8809 pagetables:14652 bounce:0 [ 1021.054344] free:25051 free_pcp:92 free_cma:0 [ 1021.100296] Node 0 active_anon:903332kB inactive_anon:783644kB active_file:116kB inactive_file:136kB unevictable:94164kB isolated(anon):0kB isolated(file):0kB mapped:240756kB dirty:0kB writeback:0kB shmem:33732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1021.142952] Node 1 active_anon:10628kB inactive_anon:3633604kB active_file:4kB inactive_file:84kB unevictable:6608kB isolated(anon):0kB isolated(file):0kB mapped:1676kB dirty:0kB writeback:0kB shmem:1504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1021.195052] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.233781] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1021.239866] Node 0 DMA32 free:35808kB min:36272kB low:45340kB high:54408kB active_anon:903320kB inactive_anon:778492kB active_file:116kB inactive_file:96kB unevictable:94164kB writepending:0kB present:3129332kB managed:2621260kB mlocked:94164kB kernel_stack:13472kB pagetables:26528kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1021.271229] lowmem_reserve[]: 0 0 0 0 0 [ 1021.275263] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1021.300897] lowmem_reserve[]: 0 0 0 0 0 [ 1021.305081] Node 1 Normal free:53608kB min:53612kB low:67012kB high:80412kB active_anon:10628kB inactive_anon:3633604kB active_file:20kB inactive_file:40kB unevictable:6608kB writepending:0kB present:3932160kB managed:3870192kB mlocked:6608kB kernel_stack:8864kB pagetables:32032kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1021.400360] lowmem_reserve[]: 0 0 0 0 0 [ 1021.421935] Node 0 DMA: 5*4kB (UME) 3*8kB (UE) 4*16kB (UM) 5*32kB (UE) 5*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 1021.576428] Node 0 DMA32: 746*4kB (UME) 88*8kB (UME) 455*16kB (UME) 188*32kB (UE) 149*64kB (UM) 62*128kB (UME) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36504kB [ 1021.679575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1021.751414] Node 1 Normal: 139*4kB (UME) 43*8kB (UME) 19*16kB (UME) 245*32kB (UME) 192*64kB (UME) 97*128kB (UM) 42*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53716kB [ 1021.892865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:53:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'}) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001540)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) 07:53:11 executing program 3: r0 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000080)={0x3, 0x8, 0x54f, 0xfbfbfbfb}) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='@['], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x72a, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r4, 0x2008}, {r5}, {}], 0x3, &(0x7f0000000240)={r6, r7+10000000}, &(0x7f0000000200)={[0x101]}, 0x8) [ 1021.968082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1021.977688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1021.986568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:53:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 1022.067634] 12293 total pagecache pages [ 1022.071657] 0 pages in swap cache [ 1022.075111] Swap cache stats: add 0, delete 0, find 0/0 07:53:11 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1022.155048] Free swap = 0kB [ 1022.182221] ceph: device name is missing path (no : separator in @[) [ 1022.183270] Total swap = 0kB [ 1022.247169] 1965979 pages RAM [ 1022.279543] 0 pages HighMem/MovableOnly 07:53:11 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1022.318627] 339053 pages reserved [ 1022.353284] 0 pages cma reserved [ 1022.385704] Out of memory: Kill process 32562 (syz-executor.4) score 1007 or sacrifice child 07:53:11 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0xe000000, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x10040810}, 0x40000) 07:53:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0xe000000, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x10040810}, 0x40000) [ 1022.996976] ceph: device name is missing path (no : separator in @[) [ 1023.212719] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1023.354522] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1023.387917] CPU: 0 PID: 32624 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1023.395835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.405222] Call Trace: [ 1023.407817] dump_stack+0x13e/0x194 [ 1023.412065] dump_header+0x178/0x6d4 [ 1023.415776] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1023.420968] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1023.427922] ? ___ratelimit+0x50/0x519 [ 1023.431915] oom_kill_process.cold+0x10/0xae3 [ 1023.436437] ? lock_acquire+0x170/0x3f0 [ 1023.440622] ? lock_downgrade+0x6e0/0x6e0 [ 1023.444786] out_of_memory+0x2d5/0x1110 [ 1023.448774] ? oom_killer_disable+0x1c0/0x1c0 [ 1023.453449] ? mutex_trylock+0x152/0x1a0 [ 1023.457519] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1023.462450] ? warn_alloc+0xf0/0xf0 [ 1023.466093] __alloc_pages_nodemask+0x5d3/0x700 [ 1023.470765] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1023.475876] ? lock_downgrade+0x6e0/0x6e0 [ 1023.480034] alloc_pages_current+0xe7/0x1e0 [ 1023.484617] __page_cache_alloc+0x245/0x3d0 [ 1023.489024] filemap_fault+0xc18/0x1c50 [ 1023.493528] ? __lock_page_or_retry+0x8a0/0x8a0 [ 1023.502054] ? lock_acquire+0x170/0x3f0 [ 1023.509161] ? ext4_filemap_fault+0x7c/0xb0 [ 1023.513493] ext4_filemap_fault+0x84/0xb0 [ 1023.517635] __do_fault+0xfa/0x380 [ 1023.521178] ? pte_offset_kernel+0x98/0xe0 [ 1023.525429] __handle_mm_fault+0x217b/0x3280 [ 1023.529844] ? copy_page_range+0x1d70/0x1d70 [ 1023.535220] ? find_held_lock+0x2d/0x110 [ 1023.539307] handle_mm_fault+0x288/0x7a0 [ 1023.543384] __do_page_fault+0x4bc/0xb40 [ 1023.547971] ? vmalloc_fault+0xdf0/0xdf0 [ 1023.552050] ? do_page_fault+0x60/0x4f2 [ 1023.556024] ? page_fault+0x2f/0x50 [ 1023.559736] page_fault+0x45/0x50 [ 1023.563187] RIP: 80000000:0x7f515729b008 [ 1023.567237] RSP: e4c32229:00000000000000f7 EFLAGS: 0078bf88 [ 1024.026417] Mem-Info: [ 1024.035201] active_anon:228180 inactive_anon:1101770 isolated_anon:0 [ 1024.035201] active_file:6 inactive_file:6 isolated_file:1 [ 1024.035201] unevictable:27683 dirty:0 writeback:0 unstable:0 [ 1024.035201] slab_reclaimable:19545 slab_unreclaimable:108055 [ 1024.035201] mapped:58279 shmem:6266 pagetables:14631 bounce:0 [ 1024.035201] free:24850 free_pcp:90 free_cma:0 [ 1024.069869] Node 0 active_anon:901924kB inactive_anon:774980kB active_file:24kB inactive_file:16kB unevictable:101548kB isolated(anon):0kB isolated(file):4kB mapped:231404kB dirty:0kB writeback:0kB shmem:25064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.110822] Node 1 active_anon:10796kB inactive_anon:3632100kB active_file:0kB inactive_file:8kB unevictable:9184kB isolated(anon):0kB isolated(file):0kB mapped:1712kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1024.156807] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:28kB writepending:0kB present:15992kB managed:15908kB mlocked:28kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.185647] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1024.191088] Node 0 DMA32 free:37172kB min:36272kB low:45340kB high:54408kB active_anon:901912kB inactive_anon:769828kB active_file:148kB inactive_file:56kB unevictable:101436kB writepending:0kB present:3129332kB managed:2621260kB mlocked:101436kB kernel_stack:13504kB pagetables:26452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.224428] lowmem_reserve[]: 0 0 0 0 0 [ 1024.228722] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.255029] lowmem_reserve[]: 0 0 0 0 0 [ 1024.260531] Node 1 Normal free:53316kB min:53612kB low:67012kB high:80412kB active_anon:10796kB inactive_anon:3632100kB active_file:0kB inactive_file:8kB unevictable:9184kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9184kB kernel_stack:8864kB pagetables:32024kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.291143] lowmem_reserve[]: 0 0 0 0 0 [ 1024.295472] Node 0 DMA: 4*4kB (UE) 5*8kB (UME) 4*16kB (UM) 6*32kB (UME) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1024.312265] Node 0 DMA32: 688*4kB (UE) 552*8kB (UM) 159*16kB (UM) 234*32kB (UME) 159*64kB (UME) 65*128kB (UM) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37744kB [ 1024.328286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1024.340873] Node 1 Normal: 143*4kB (UME) 84*8kB (UME) 130*16kB (UE) 232*32kB (UE) 159*64kB (UME) 103*128kB (UM) 43*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 54332kB [ 1024.357860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.367162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.376210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.386123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.395074] 10468 total pagecache pages [ 1024.399432] 0 pages in swap cache [ 1024.403157] Swap cache stats: add 0, delete 0, find 0/0 [ 1024.408827] Free swap = 0kB [ 1024.412088] Total swap = 0kB [ 1024.415353] 1965979 pages RAM [ 1024.419373] 0 pages HighMem/MovableOnly [ 1024.423597] 339053 pages reserved [ 1024.427541] 0 pages cma reserved [ 1024.431922] Out of memory: Kill process 32600 (syz-executor.1) score 1007 or sacrifice child [ 1024.441072] Killed process 32600 (syz-executor.1) total-vm:74972kB, anon-rss:17952kB, file-rss:39216kB, shmem-rss:0kB [ 1024.484367] oom_reaper: reaped process 32600 (syz-executor.1), now anon-rss:18020kB, file-rss:8496kB, shmem-rss:0kB 07:53:13 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:13 executing program 2: 07:53:13 executing program 3: 07:53:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:53:14 executing program 2: 07:53:14 executing program 3: 07:53:14 executing program 2: 07:53:14 executing program 2: 07:53:15 executing program 3: 07:53:15 executing program 3: 07:53:15 executing program 2: 07:53:15 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:16 executing program 3: 07:53:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:53:16 executing program 2: 07:53:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:17 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:17 executing program 2: 07:53:17 executing program 3: 07:53:17 executing program 2: 07:53:17 executing program 3: [ 1028.882806] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1029.008087] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1029.025883] CPU: 1 PID: 6352 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0 [ 1029.033818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.043397] Call Trace: [ 1029.045986] dump_stack+0x13e/0x194 [ 1029.049604] dump_header+0x178/0x6d4 [ 1029.053318] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1029.058321] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1029.063423] ? ___ratelimit+0x50/0x519 [ 1029.067323] oom_kill_process.cold+0x10/0xae3 [ 1029.071804] ? lock_downgrade+0x6e0/0x6e0 [ 1029.075970] out_of_memory+0x2d5/0x1110 [ 1029.079953] ? oom_killer_disable+0x1c0/0x1c0 [ 1029.084441] ? mutex_trylock+0x152/0x1a0 [ 1029.088489] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1029.093345] ? warn_alloc+0xf0/0xf0 [ 1029.096959] ? find_held_lock+0x2d/0x110 [ 1029.101015] ? fs_reclaim_acquire+0x10/0x10 [ 1029.105326] __alloc_pages_nodemask+0x5d3/0x700 [ 1029.109999] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1029.114936] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1029.120073] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1029.125200] ? cache_grow_begin+0x32d/0x410 [ 1029.129573] cache_grow_begin+0x7b/0x410 [ 1029.133675] fallback_alloc+0x205/0x2b0 [ 1029.137650] kmem_cache_alloc+0x1ea/0x770 [ 1029.141792] ? find_held_lock+0x2d/0x110 [ 1029.145837] getname_flags+0xc8/0x560 [ 1029.149635] user_path_mountpoint_at+0x23/0x40 [ 1029.154226] SyS_umount+0x10a/0x340 [ 1029.157834] ? __detach_mounts+0x2e0/0x2e0 [ 1029.162056] ? __do_page_fault+0x35b/0xb40 [ 1029.166313] ? do_syscall_64+0x4c/0x640 [ 1029.170273] ? __detach_mounts+0x2e0/0x2e0 [ 1029.174516] do_syscall_64+0x1d5/0x640 [ 1029.178467] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1029.183642] RIP: 0033:0x45f457 [ 1029.186841] RSP: 002b:00007fff75b21d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1029.194646] RAX: ffffffffffffffda RBX: 00000000000fafe6 RCX: 000000000045f457 [ 1029.201986] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff75b22e50 [ 1029.209420] RBP: 00000000000009b0 R08: 0000000000000001 R09: 0000000002a58940 [ 1029.216677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff75b22e50 [ 1029.225573] R13: 00007fff75b22e40 R14: 0000000000000000 R15: 00007fff75b22e50 [ 1029.256716] Mem-Info: [ 1029.259195] active_anon:228158 inactive_anon:1106332 isolated_anon:0 [ 1029.259195] active_file:11 inactive_file:0 isolated_file:0 [ 1029.259195] unevictable:23952 dirty:2 writeback:0 unstable:0 [ 1029.259195] slab_reclaimable:19662 slab_unreclaimable:107039 [ 1029.259195] mapped:60272 shmem:6266 pagetables:14641 bounce:0 [ 1029.259195] free:24954 free_pcp:90 free_cma:0 [ 1029.331018] Node 0 active_anon:901968kB inactive_anon:790488kB active_file:12kB inactive_file:0kB unevictable:87356kB isolated(anon):0kB isolated(file):0kB mapped:238720kB dirty:8kB writeback:0kB shmem:25064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1029.370988] Node 1 active_anon:10664kB inactive_anon:3634840kB active_file:32kB inactive_file:0kB unevictable:8452kB isolated(anon):0kB isolated(file):0kB mapped:2368kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1029.579211] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5208kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.715968] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1029.722066] Node 0 DMA32 free:36160kB min:36272kB low:45340kB high:54408kB active_anon:901956kB inactive_anon:785280kB active_file:56kB inactive_file:24kB unevictable:87356kB writepending:8kB present:3129332kB managed:2621260kB mlocked:87356kB kernel_stack:13536kB pagetables:26440kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1029.780050] lowmem_reserve[]: 0 0 0 0 0 [ 1029.784201] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1029.831486] lowmem_reserve[]: 0 0 0 0 0 [ 1029.835519] Node 1 Normal free:53600kB min:53612kB low:67012kB high:80412kB active_anon:10664kB inactive_anon:3634840kB active_file:0kB inactive_file:12kB unevictable:8452kB writepending:0kB present:3932160kB managed:3870192kB mlocked:8452kB kernel_stack:8832kB pagetables:32076kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1029.895091] lowmem_reserve[]: 0 0 0 0 0 [ 1029.915805] Node 0 DMA: 5*4kB (UME) 7*8kB (UME) 5*16kB (UM) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1029.944277] Node 0 DMA32: 731*4kB (UE) 492*8kB (UME) 74*16kB (UME) 232*32kB (UM) 159*64kB (UME) 66*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36140kB [ 1029.967446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1029.982065] Node 1 Normal: 88*4kB (UME) 36*8kB (UE) 234*16kB (UE) 238*32kB (UME) 158*64kB (UME) 88*128kB (UM) 43*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53600kB [ 1030.005797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.014796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.027665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.037336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.046035] 12450 total pagecache pages [ 1030.053392] 0 pages in swap cache [ 1030.057153] Swap cache stats: add 0, delete 0, find 0/0 [ 1030.062519] Free swap = 0kB [ 1030.065557] Total swap = 0kB [ 1030.072838] 1965979 pages RAM [ 1030.076789] 0 pages HighMem/MovableOnly [ 1030.080759] 339053 pages reserved [ 1030.084196] 0 pages cma reserved [ 1030.090898] Out of memory: Kill process 32656 (syz-executor.0) score 1009 or sacrifice child [ 1030.099560] Killed process 32656 (syz-executor.0) total-vm:74972kB, anon-rss:18028kB, file-rss:48492kB, shmem-rss:0kB [ 1030.155529] oom_reaper: reaped process 32656 (syz-executor.0), now anon-rss:18020kB, file-rss:16424kB, shmem-rss:0kB [ 1030.192884] kworker/u4:2 invoked oom-killer: gfp_mask=0x14040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1030.213358] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1030.218392] CPU: 1 PID: 26693 Comm: kworker/u4:2 Not tainted 4.14.180-syzkaller #0 [ 1030.226102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.235484] Workqueue: krdsd rds_connect_worker [ 1030.240244] Call Trace: [ 1030.242846] dump_stack+0x13e/0x194 [ 1030.246475] dump_header+0x178/0x6d4 [ 1030.250196] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1030.255377] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1030.260635] ? ___ratelimit+0x50/0x519 [ 1030.266112] oom_kill_process.cold+0x10/0xae3 [ 1030.271662] ? lock_acquire+0x170/0x3f0 [ 1030.275627] ? lock_downgrade+0x6e0/0x6e0 [ 1030.279758] out_of_memory+0x2d5/0x1110 [ 1030.283716] ? oom_killer_disable+0x1c0/0x1c0 [ 1030.288461] ? mutex_trylock+0x152/0x1a0 [ 1030.292522] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 1030.297363] ? warn_alloc+0xf0/0xf0 [ 1030.300979] __alloc_pages_nodemask+0x5d3/0x700 [ 1030.305726] ? __alloc_pages_nodemask+0x5e0/0x700 [ 1030.311347] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1030.316362] ? mark_held_locks+0xa6/0xf0 [ 1030.321050] ? cache_grow_begin+0x32d/0x410 [ 1030.325589] cache_grow_begin+0x7b/0x410 [ 1030.329820] fallback_alloc+0x205/0x2b0 [ 1030.333809] kmem_cache_alloc+0x1ea/0x770 [ 1030.337941] ? selinux_socket_create+0x219/0x4a0 [ 1030.342735] ? sock_destroy_inode+0x60/0x60 [ 1030.347103] sock_alloc_inode+0x19/0x250 [ 1030.351262] ? sock_destroy_inode+0x60/0x60 [ 1030.356349] alloc_inode+0x5d/0x170 [ 1030.359972] new_inode_pseudo+0x14/0xe0 [ 1030.363935] sock_alloc+0x3c/0x270 [ 1030.367462] __sock_create+0x89/0x620 [ 1030.371774] rds_tcp_conn_path_connect+0x1b2/0x4d0 [ 1030.376688] ? save_trace+0x290/0x290 [ 1030.380494] ? rds_tcp_state_change+0x290/0x290 [ 1030.385170] ? __lock_is_held+0xad/0x140 [ 1030.389235] rds_connect_worker+0x13f/0x1d0 [ 1030.393542] process_one_work+0x813/0x1540 [ 1030.397781] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1030.402446] ? worker_thread+0x15d/0x1070 [ 1030.406581] ? _raw_spin_unlock_irq+0x24/0x80 [ 1030.411145] worker_thread+0x5d1/0x1070 [ 1030.416739] ? process_one_work+0x1540/0x1540 [ 1030.421877] kthread+0x30d/0x420 [ 1030.425322] ? kthread_create_on_node+0xd0/0xd0 [ 1030.430066] ret_from_fork+0x24/0x30 [ 1030.438669] Mem-Info: [ 1030.441092] active_anon:228158 inactive_anon:1106332 isolated_anon:0 [ 1030.441092] active_file:27 inactive_file:2 isolated_file:0 [ 1030.441092] unevictable:23952 dirty:2 writeback:0 unstable:0 [ 1030.441092] slab_reclaimable:19663 slab_unreclaimable:107026 [ 1030.441092] mapped:60269 shmem:6266 pagetables:14633 bounce:0 [ 1030.441092] free:24992 free_pcp:157 free_cma:0 [ 1030.479604] Node 0 active_anon:901968kB inactive_anon:790488kB active_file:104kB inactive_file:8kB unevictable:87356kB isolated(anon):0kB isolated(file):0kB mapped:238720kB dirty:8kB writeback:0kB shmem:25064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1030.512483] Node 1 active_anon:10664kB inactive_anon:3634840kB active_file:4kB inactive_file:0kB unevictable:8452kB isolated(anon):0kB isolated(file):0kB mapped:2356kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1030.545589] Node 0 DMA free:10428kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5208kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.576214] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1030.611890] Node 0 DMA32 free:35880kB min:36272kB low:45340kB high:54408kB active_anon:901944kB inactive_anon:785280kB active_file:128kB inactive_file:0kB unevictable:87360kB writepending:8kB present:3129332kB managed:2621260kB mlocked:87360kB kernel_stack:13440kB pagetables:26440kB bounce:0kB free_pcp:504kB local_pcp:316kB free_cma:0kB [ 1030.651894] lowmem_reserve[]: 0 0 0 0 0 [ 1030.655917] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.696745] lowmem_reserve[]: 0 0 0 0 0 [ 1030.700780] Node 1 Normal free:53600kB min:53612kB low:67012kB high:80412kB active_anon:10664kB inactive_anon:3634840kB active_file:0kB inactive_file:8kB unevictable:8452kB writepending:0kB present:3932160kB managed:3870192kB mlocked:8452kB kernel_stack:8832kB pagetables:32048kB bounce:0kB free_pcp:276kB local_pcp:276kB free_cma:0kB [ 1030.752535] lowmem_reserve[]: 0 0 0 0 0 [ 1030.762401] Node 0 DMA: 5*4kB (UME) 7*8kB (UME) 5*16kB (UM) 5*32kB (UE) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 1030.792127] Node 0 DMA32: 670*4kB (UME) 494*8kB (UME) 66*16kB (UME) 236*32kB (UM) 159*64kB (UME) 66*128kB (UME) 8*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35912kB [ 1030.816392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1030.853575] Node 1 Normal: 88*4kB (UME) 36*8kB (UE) 234*16kB (UE) 238*32kB (UME) 158*64kB (UME) 88*128kB (UM) 43*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53600kB [ 1030.880672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.889587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.908668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.918384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1030.937384] 12450 total pagecache pages [ 1030.941684] 0 pages in swap cache [ 1030.945391] Swap cache stats: add 0, delete 0, find 0/0 [ 1030.960515] Free swap = 0kB [ 1030.963550] Total swap = 0kB [ 1030.966805] 1965979 pages RAM [ 1030.969988] 0 pages HighMem/MovableOnly [ 1030.974022] 339053 pages reserved [ 1030.984623] 0 pages cma reserved [ 1030.988155] Out of memory: Kill process 32661 (syz-executor.1) score 1007 or sacrifice child [ 1031.003604] Killed process 32661 (syz-executor.1) total-vm:74972kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB 07:53:20 executing program 0: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:20 executing program 3: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x25d) 07:53:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'batadv_slave_0\x00', {0x2}}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 07:53:20 executing program 2: 07:53:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) 07:53:20 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="65350600050000002c0012800c0001006d6163766c616e001c0002800800010008000000060002000100000006000200010000000a00050004000000"], 0x60}}, 0x0) 07:53:20 executing program 1: socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6(0xa, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0xfffffefc) [ 1031.542507] libceph: connect [d::]:6789 error -101 [ 1031.558859] libceph: mon0 [d::]:6789 connect error [ 1031.596740] libceph: connect [d::]:6789 error -101 [ 1031.638707] libceph: mon0 [d::]:6789 connect error [ 1031.703212] IPVS: ftp: loaded support on port[0] = 21 [ 1031.776142] ceph: No mds server is up or the cluster is laggy [ 1031.789246] ceph: No mds server is up or the cluster is laggy 07:53:21 executing program 3: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x25d) [ 1032.704674] syz-executor.3: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1032.809005] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1032.871506] CPU: 0 PID: 32719 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1032.879437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.889014] Call Trace: [ 1032.891703] dump_stack+0x13e/0x194 [ 1032.895344] warn_alloc.cold+0x96/0x1af [ 1032.899324] ? zone_watermark_ok_safe+0x280/0x280 [ 1032.904214] ? __alloc_pages_direct_compact+0xba/0x360 [ 1032.909606] __alloc_pages_slowpath+0x2114/0x26c0 [ 1032.914462] ? check_preemption_disabled+0x35/0x240 [ 1032.919498] ? warn_alloc+0xf0/0xf0 [ 1032.923142] ? find_held_lock+0x2d/0x110 [ 1032.927235] ? fs_reclaim_acquire+0x10/0x10 [ 1032.931574] __alloc_pages_nodemask+0x5d3/0x700 [ 1032.936250] ? check_preemption_disabled+0x35/0x240 [ 1032.941282] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1032.946881] cache_grow_begin+0x7b/0x410 [ 1032.951047] fallback_alloc+0x205/0x2b0 [ 1032.955033] __kmalloc+0x214/0x7c0 [ 1032.958586] ? mempool_create_node+0x2cd/0x3c0 [ 1032.963195] ? __lockdep_init_map+0x100/0x560 [ 1032.972047] ? mempool_resize+0x5d0/0x5d0 [ 1032.976209] mempool_create_node+0x2cd/0x3c0 [ 1032.980637] ceph_mount+0x796/0x1815 [ 1032.984365] ? __lockdep_init_map+0x100/0x560 [ 1032.988873] mount_fs+0x92/0x2a0 [ 1032.992244] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1032.996745] do_mount+0x3c9/0x24f0 [ 1033.000285] ? copy_mnt_ns+0x8a0/0x8a0 [ 1033.004169] ? copy_mount_string+0x40/0x40 [ 1033.008494] ? copy_mount_options+0x16/0x2e0 [ 1033.013646] ? copy_mount_options+0x1e7/0x2e0 [ 1033.018150] ? copy_mount_options+0x1ec/0x2e0 [ 1033.022653] ? copy_mnt_ns+0x8a0/0x8a0 [ 1033.026548] SyS_mount+0xa8/0x120 [ 1033.030004] ? copy_mnt_ns+0x8a0/0x8a0 [ 1033.033902] do_syscall_64+0x1d5/0x640 [ 1033.037803] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1033.042995] RIP: 0033:0x45ca29 [ 1033.046184] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1033.053925] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 1033.061226] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 1033.068506] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1033.075787] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1033.083072] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007fb9c190f6d4 [ 1033.124569] Mem-Info: [ 1033.129127] active_anon:228213 inactive_anon:1103949 isolated_anon:0 [ 1033.129127] active_file:16 inactive_file:31 isolated_file:20 [ 1033.129127] unevictable:24855 dirty:0 writeback:0 unstable:0 [ 1033.129127] slab_reclaimable:19670 slab_unreclaimable:108311 [ 1033.129127] mapped:59744 shmem:8445 pagetables:14677 bounce:0 [ 1033.129127] free:24923 free_pcp:171 free_cma:0 [ 1033.171242] Node 0 active_anon:901884kB inactive_anon:782004kB active_file:164kB inactive_file:220kB unevictable:89816kB isolated(anon):0kB isolated(file):80kB mapped:237288kB dirty:0kB writeback:0kB shmem:32088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1033.260111] Node 1 active_anon:10968kB inactive_anon:3633792kB active_file:0kB inactive_file:4kB unevictable:9604kB isolated(anon):0kB isolated(file):0kB mapped:1688kB dirty:0kB writeback:0kB shmem:1692kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1033.289802] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:12kB inactive_anon:5152kB active_file:0kB inactive_file:0kB unevictable:36kB writepending:0kB present:15992kB managed:15908kB mlocked:36kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.318952] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 1033.325452] Node 0 DMA32 free:36688kB min:36272kB low:45340kB high:54408kB active_anon:901872kB inactive_anon:776760kB active_file:80kB inactive_file:576kB unevictable:89580kB writepending:0kB present:3129332kB managed:2621260kB mlocked:89580kB kernel_stack:13600kB pagetables:26488kB bounce:0kB free_pcp:952kB local_pcp:232kB free_cma:0kB [ 1033.366047] lowmem_reserve[]: 0 0 0 0 0 [ 1033.380957] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.413938] lowmem_reserve[]: 0 0 0 0 0 [ 1033.419615] Node 1 Normal free:53392kB min:53612kB low:67012kB high:80412kB active_anon:10968kB inactive_anon:3633792kB active_file:0kB inactive_file:4kB unevictable:9604kB writepending:0kB present:3932160kB managed:3870192kB mlocked:9604kB kernel_stack:8928kB pagetables:32172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.456096] lowmem_reserve[]: 0 0 0 0 0 [ 1033.461588] Node 0 DMA: 4*4kB (UE) 3*8kB (UE) 5*16kB (UM) 6*32kB (UME) 4*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 1033.563267] Node 0 DMA32: 579*4kB (UME) 793*8kB (UM) 248*16kB (UM) 235*32kB (UME) 159*64kB (UM) 55*128kB (UM) 3*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38132kB [ 1033.689413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1033.730267] Node 1 Normal: 85*4kB (UME) 36*8kB (UME) 236*16kB (UME) 230*32kB (UE) 153*64kB (UME) 89*128kB (UM) 44*256kB (UM) 16*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53428kB [ 1033.747770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.757751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.768411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.778379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.789414] 12194 total pagecache pages [ 1033.794654] 0 pages in swap cache [ 1033.800087] Swap cache stats: add 0, delete 0, find 0/0 [ 1033.806876] Free swap = 0kB [ 1033.820151] Total swap = 0kB [ 1033.823833] 1965979 pages RAM [ 1033.827856] 0 pages HighMem/MovableOnly [ 1033.833218] 339053 pages reserved [ 1033.838561] 0 pages cma reserved [ 1033.846799] ================================================================== [ 1033.856025] BUG: KASAN: use-after-free in ceph_destroy_options+0xda/0x100 [ 1033.862961] Read of size 8 at addr ffff88809b113b50 by task syz-executor.3/32719 [ 1033.870579] [ 1033.872212] CPU: 0 PID: 32719 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0 [ 1033.880104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.889461] Call Trace: [ 1033.892062] dump_stack+0x13e/0x194 [ 1033.895851] ? ceph_destroy_options+0xda/0x100 [ 1033.900438] print_address_description.cold+0x7c/0x1e2 [ 1033.908138] ? ceph_destroy_options+0xda/0x100 [ 1033.912818] kasan_report.cold+0xa9/0x2ae [ 1033.916983] ceph_destroy_options+0xda/0x100 [ 1033.921479] ceph_mount+0xd4c/0x1815 [ 1033.925186] ? __lockdep_init_map+0x100/0x560 [ 1033.929715] mount_fs+0x92/0x2a0 [ 1033.933146] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1033.937952] do_mount+0x3c9/0x24f0 [ 1033.941490] ? copy_mnt_ns+0x8a0/0x8a0 [ 1033.945379] ? copy_mount_string+0x40/0x40 [ 1033.949606] ? copy_mount_options+0x16/0x2e0 [ 1033.954019] ? copy_mount_options+0x1e7/0x2e0 [ 1033.958511] ? copy_mount_options+0x1ec/0x2e0 [ 1033.962985] ? copy_mnt_ns+0x8a0/0x8a0 [ 1033.966864] SyS_mount+0xa8/0x120 [ 1033.970422] ? copy_mnt_ns+0x8a0/0x8a0 [ 1033.974301] do_syscall_64+0x1d5/0x640 [ 1033.978177] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1033.984483] RIP: 0033:0x45ca29 [ 1033.987659] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1033.995360] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 1034.002720] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 1034.010320] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1034.017661] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1034.024907] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007fb9c190f6d4 [ 1034.032162] [ 1034.033767] Allocated by task 32719: [ 1034.037552] save_stack+0x32/0xa0 [ 1034.041075] kasan_kmalloc+0xbf/0xe0 [ 1034.044763] kmem_cache_alloc_trace+0x14d/0x7b0 [ 1034.049536] ceph_parse_options+0xb8/0xe80 [ 1034.053756] ceph_mount+0x44f/0x1815 [ 1034.057481] mount_fs+0x92/0x2a0 [ 1034.060825] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1034.065294] do_mount+0x3c9/0x24f0 [ 1034.068829] SyS_mount+0xa8/0x120 [ 1034.072290] do_syscall_64+0x1d5/0x640 [ 1034.076178] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1034.081356] [ 1034.083503] Freed by task 32719: [ 1034.086963] save_stack+0x32/0xa0 [ 1034.090411] kasan_slab_free+0x75/0xc0 [ 1034.094281] kfree+0xcb/0x260 [ 1034.097367] ceph_destroy_client+0x90/0xb0 [ 1034.101765] ceph_mount+0xd25/0x1815 [ 1034.105466] mount_fs+0x92/0x2a0 [ 1034.108818] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1034.113678] do_mount+0x3c9/0x24f0 [ 1034.117294] SyS_mount+0xa8/0x120 [ 1034.120724] do_syscall_64+0x1d5/0x640 [ 1034.124588] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1034.130881] [ 1034.132494] The buggy address belongs to the object at ffff88809b113a80 [ 1034.132494] which belongs to the cache kmalloc-256 of size 256 [ 1034.145494] The buggy address is located 208 bytes inside of [ 1034.145494] 256-byte region [ffff88809b113a80, ffff88809b113b80) [ 1034.157644] The buggy address belongs to the page: [ 1034.162551] page:ffffea00026c44c0 count:1 mapcount:0 mapping:ffff88809b113080 index:0xffff88809b113940 [ 1034.171997] flags: 0xfffe0000000100(slab) [ 1034.179205] raw: 00fffe0000000100 ffff88809b113080 ffff88809b113940 0000000100000005 [ 1034.187257] raw: ffffea00027df560 ffffea00023714e0 ffff88812fe547c0 0000000000000000 [ 1034.195568] page dumped because: kasan: bad access detected [ 1034.201270] [ 1034.202886] Memory state around the buggy address: [ 1034.208243] ffff88809b113a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1034.215857] ffff88809b113a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1034.223291] >ffff88809b113b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1034.230832] ^ [ 1034.236877] ffff88809b113b80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1034.244272] ffff88809b113c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1034.251669] ================================================================== [ 1034.259115] Disabling lock debugging due to kernel taint [ 1034.270534] Kernel panic - not syncing: panic_on_warn set ... [ 1034.270534] [ 1034.278437] CPU: 0 PID: 32719 Comm: syz-executor.3 Tainted: G B 4.14.180-syzkaller #0 [ 1034.287538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.297408] Call Trace: [ 1034.299986] dump_stack+0x13e/0x194 [ 1034.303699] panic+0x1f9/0x42d [ 1034.306882] ? add_taint.cold+0x16/0x16 [ 1034.310969] ? preempt_schedule_common+0x4a/0xc0 [ 1034.315783] ? ceph_destroy_options+0xda/0x100 [ 1034.320457] ? ___preempt_schedule+0x16/0x18 [ 1034.324865] ? ceph_destroy_options+0xda/0x100 [ 1034.329482] kasan_end_report+0x43/0x49 [ 1034.333459] kasan_report.cold+0x12f/0x2ae [ 1034.337692] ceph_destroy_options+0xda/0x100 [ 1034.342127] ceph_mount+0xd4c/0x1815 [ 1034.345850] ? __lockdep_init_map+0x100/0x560 [ 1034.350377] mount_fs+0x92/0x2a0 [ 1034.353744] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1034.358243] do_mount+0x3c9/0x24f0 [ 1034.361781] ? copy_mnt_ns+0x8a0/0x8a0 [ 1034.365682] ? copy_mount_string+0x40/0x40 [ 1034.370464] ? copy_mount_options+0x16/0x2e0 [ 1034.374865] ? copy_mount_options+0x1e7/0x2e0 [ 1034.379363] ? copy_mount_options+0x1ec/0x2e0 [ 1034.383848] ? copy_mnt_ns+0x8a0/0x8a0 [ 1034.387731] SyS_mount+0xa8/0x120 [ 1034.391263] ? copy_mnt_ns+0x8a0/0x8a0 [ 1034.395147] do_syscall_64+0x1d5/0x640 [ 1034.399059] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1034.404248] RIP: 0033:0x45ca29 [ 1034.407434] RSP: 002b:00007fb9c190ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1034.413895] syz-executor.2 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask= [ 1034.415140] RAX: ffffffffffffffda RBX: 00000000004f6280 RCX: 000000000045ca29 [ 1034.415142] (null), order=0, oom_score_adj=1000 [ 1034.424281] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000480 [ 1034.424287] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1034.424291] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1034.424295] R13: 0000000000000751 R14: 00000000004ca3aa R15: 00007fb9c190f6d4 [ 1034.425629] Kernel Offset: disabled [ 1034.470634] Rebooting in 86400 seconds..